----
type=USER_AUTH msg=audit(12.03.2026 00:00:01.549:764) : pid=315876 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 00:00:01.550:765) : pid=315876 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 00:00:01.551:766) : pid=315876 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=97 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 00:00:01.551:766) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 00:00:01.551:766) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=315876 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=97 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_AUTH msg=audit(12.03.2026 00:00:01.551:767) : pid=315877 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 00:00:01.553:768) : pid=315877 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 00:00:01.553:769) : pid=315877 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=98 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 00:00:01.553:769) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 00:00:01.553:769) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=315877 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=98 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 00:00:01.569:770) : pid=315876 uid=root auid=root ses=97 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 00:00:01.571:771) : pid=315880 uid=root auid=root ses=97 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 00:00:01.573:772) : pid=315877 uid=root auid=root ses=98 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 00:00:01.574:773) : pid=315883 uid=root auid=root ses=98 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 00:00:01.576:774) : pid=315877 uid=root auid=root ses=98 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 00:00:23.602:775) : pid=315876 uid=root auid=root ses=97 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 00:01:01.515:776) : pid=316116 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 00:01:01.516:777) : pid=316116 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 00:01:01.516:778) : pid=316116 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=99 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 00:01:01.516:778) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 00:01:01.516:778) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=316116 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=99 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 00:01:01.532:779) : pid=316116 uid=root auid=root ses=99 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 00:01:01.533:780) : pid=316118 uid=root auid=root ses=99 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 00:01:01.535:781) : pid=316116 uid=root auid=root ses=99 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 00:10:02.023:782) : pid=318199 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 00:10:02.024:783) : pid=318199 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 00:10:02.025:784) : pid=318199 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=100 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 00:10:02.025:784) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 00:10:02.025:784) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=318199 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=100 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 00:10:02.046:785) : pid=318199 uid=root auid=root ses=100 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 00:10:02.048:786) : pid=318201 uid=root auid=root ses=100 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 00:10:02.050:787) : pid=318199 uid=root auid=root ses=100 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 00:20:01.571:788) : pid=320547 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 00:20:01.572:789) : pid=320547 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 00:20:01.572:790) : pid=320547 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=101 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 00:20:01.572:790) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 00:20:01.572:790) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=320547 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=101 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 00:20:01.589:791) : pid=320547 uid=root auid=root ses=101 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 00:20:01.590:792) : pid=320549 uid=root auid=root ses=101 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 00:20:01.592:793) : pid=320547 uid=root auid=root ses=101 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 00:30:01.118:794) : pid=323059 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 00:30:01.119:795) : pid=323059 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 00:30:01.119:796) : pid=323059 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=102 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 00:30:01.119:796) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 00:30:01.119:796) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=323059 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=102 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 00:30:01.133:797) : pid=323059 uid=root auid=root ses=102 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 00:30:01.134:798) : pid=323061 uid=root auid=root ses=102 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 00:30:01.136:799) : pid=323059 uid=root auid=root ses=102 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 00:40:01.683:800) : pid=325222 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 00:40:01.683:801) : pid=325222 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 00:40:01.684:802) : pid=325222 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=103 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 00:40:01.684:802) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 00:40:01.684:802) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=325222 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=103 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 00:40:01.701:803) : pid=325222 uid=root auid=root ses=103 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 00:40:01.701:804) : pid=325224 uid=root auid=root ses=103 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 00:40:01.703:805) : pid=325222 uid=root auid=root ses=103 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 00:50:01.233:806) : pid=327387 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 00:50:01.234:807) : pid=327387 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 00:50:01.234:808) : pid=327387 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=104 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 00:50:01.234:808) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 00:50:01.234:808) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=327387 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=104 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 00:50:01.252:809) : pid=327387 uid=root auid=root ses=104 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 00:50:01.253:810) : pid=327389 uid=root auid=root ses=104 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 00:50:01.254:811) : pid=327387 uid=root auid=root ses=104 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 01:00:01.797:812) : pid=329686 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 01:00:01.797:813) : pid=329686 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 01:00:01.798:814) : pid=329686 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=105 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 01:00:01.798:814) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 01:00:01.798:814) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=329686 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=105 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 01:00:01.817:815) : pid=329686 uid=root auid=root ses=105 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 01:00:01.817:816) : pid=329688 uid=root auid=root ses=105 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 01:00:01.818:817) : pid=329686 uid=root auid=root ses=105 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 01:01:01.832:818) : pid=329898 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 01:01:01.832:819) : pid=329898 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 01:01:01.833:820) : pid=329898 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=106 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 01:01:01.833:820) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 01:01:01.833:820) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=329898 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=106 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 01:01:01.845:821) : pid=329898 uid=root auid=root ses=106 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 01:01:01.846:822) : pid=329900 uid=root auid=root ses=106 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 01:01:01.848:823) : pid=329898 uid=root auid=root ses=106 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 01:10:01.333:824) : pid=332195 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 01:10:01.334:825) : pid=332195 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 01:10:01.334:826) : pid=332195 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=107 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 01:10:01.334:826) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 01:10:01.334:826) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=332195 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=107 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 01:10:01.354:827) : pid=332195 uid=root auid=root ses=107 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 01:10:01.355:828) : pid=332197 uid=root auid=root ses=107 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 01:10:01.357:829) : pid=332195 uid=root auid=root ses=107 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 01:20:01.845:830) : pid=334454 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 01:20:01.846:831) : pid=334454 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 01:20:01.846:832) : pid=334454 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=108 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 01:20:01.846:832) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 01:20:01.846:832) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=334454 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=108 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 01:20:01.864:833) : pid=334454 uid=root auid=root ses=108 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 01:20:01.865:834) : pid=334456 uid=root auid=root ses=108 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 01:20:01.867:835) : pid=334454 uid=root auid=root ses=108 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 01:30:01.400:836) : pid=336814 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 01:30:01.402:837) : pid=336814 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 01:30:01.402:838) : pid=336814 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=109 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 01:30:01.402:838) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 01:30:01.402:838) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=336814 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=109 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 01:30:01.422:839) : pid=336814 uid=root auid=root ses=109 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 01:30:01.423:840) : pid=336816 uid=root auid=root ses=109 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 01:30:01.425:841) : pid=336814 uid=root auid=root ses=109 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 01:40:01.963:842) : pid=339017 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 01:40:01.964:843) : pid=339017 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 01:40:01.964:844) : pid=339017 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=110 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 01:40:01.964:844) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 01:40:01.964:844) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=339017 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=110 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 01:40:01.982:845) : pid=339017 uid=root auid=root ses=110 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 01:40:01.983:846) : pid=339019 uid=root auid=root ses=110 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 01:40:01.985:847) : pid=339017 uid=root auid=root ses=110 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 01:50:01.517:848) : pid=341165 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 01:50:01.518:849) : pid=341165 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 01:50:01.518:850) : pid=341165 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=111 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 01:50:01.518:850) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 01:50:01.518:850) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=341165 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=111 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 01:50:01.532:851) : pid=341165 uid=root auid=root ses=111 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 01:50:01.533:852) : pid=341167 uid=root auid=root ses=111 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 01:50:01.535:853) : pid=341165 uid=root auid=root ses=111 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 02:00:01.046:854) : pid=343598 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 02:00:01.047:855) : pid=343599 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 02:00:01.047:856) : pid=343598 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 02:00:01.048:857) : pid=343598 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=112 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 02:00:01.048:857) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 02:00:01.048:857) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=343598 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=112 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_ACCT msg=audit(12.03.2026 02:00:01.048:858) : pid=343599 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 02:00:01.048:859) : pid=343599 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=113 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 02:00:01.048:859) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 02:00:01.048:859) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=343599 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=113 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 02:00:01.077:860) : pid=343598 uid=root auid=root ses=112 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 02:00:01.077:861) : pid=343602 uid=root auid=root ses=112 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 02:00:01.082:862) : pid=343599 uid=root auid=root ses=113 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 02:00:01.082:863) : pid=343598 uid=root auid=root ses=112 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 02:00:01.082:864) : pid=343603 uid=root auid=root ses=113 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 02:00:01.085:865) : pid=343599 uid=root auid=root ses=113 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 02:01:01.066:866) : pid=343815 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 02:01:01.067:867) : pid=343815 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 02:01:01.067:868) : pid=343815 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=114 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 02:01:01.067:868) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 02:01:01.067:868) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=343815 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=114 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 02:01:01.085:869) : pid=343815 uid=root auid=root ses=114 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 02:01:01.085:870) : pid=343818 uid=root auid=root ses=114 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 02:01:01.088:871) : pid=343815 uid=root auid=root ses=114 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 02:10:01.563:872) : pid=346020 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 02:10:01.564:873) : pid=346020 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 02:10:01.564:874) : pid=346020 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=115 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 02:10:01.564:874) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 02:10:01.564:874) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=346020 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=115 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 02:10:01.581:875) : pid=346020 uid=root auid=root ses=115 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 02:10:01.581:876) : pid=346022 uid=root auid=root ses=115 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 02:10:01.583:877) : pid=346020 uid=root auid=root ses=115 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 02:20:01.100:878) : pid=348293 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 02:20:01.100:879) : pid=348293 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 02:20:01.100:880) : pid=348293 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=116 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 02:20:01.100:880) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 02:20:01.100:880) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=348293 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=116 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 02:20:01.116:881) : pid=348293 uid=root auid=root ses=116 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 02:20:01.117:882) : pid=348295 uid=root auid=root ses=116 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 02:20:01.119:883) : pid=348293 uid=root auid=root ses=116 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 02:30:01.626:884) : pid=350731 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 02:30:01.627:885) : pid=350731 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 02:30:01.628:886) : pid=350731 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=117 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 02:30:01.628:886) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 02:30:01.628:886) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=350731 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=117 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 02:30:01.649:887) : pid=350731 uid=root auid=root ses=117 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 02:30:01.650:888) : pid=350733 uid=root auid=root ses=117 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 02:30:01.652:889) : pid=350731 uid=root auid=root ses=117 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 02:40:01.144:890) : pid=352938 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 02:40:01.145:891) : pid=352938 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 02:40:01.145:892) : pid=352938 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=118 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 02:40:01.145:892) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 02:40:01.145:892) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=352938 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=118 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 02:40:01.163:893) : pid=352938 uid=root auid=root ses=118 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 02:40:01.163:894) : pid=352940 uid=root auid=root ses=118 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 02:40:01.165:895) : pid=352938 uid=root auid=root ses=118 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 02:50:01.639:896) : pid=355155 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 02:50:01.640:897) : pid=355155 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 02:50:01.640:898) : pid=355155 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=119 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 02:50:01.640:898) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 02:50:01.640:898) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=355155 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=119 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 02:50:01.669:899) : pid=355155 uid=root auid=root ses=119 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 02:50:01.670:900) : pid=355157 uid=root auid=root ses=119 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 02:50:01.671:901) : pid=355155 uid=root auid=root ses=119 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 03:00:01.151:902) : pid=357622 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 03:00:01.152:903) : pid=357622 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 03:00:01.152:904) : pid=357622 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=120 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 03:00:01.152:904) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 03:00:01.152:904) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=357622 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=120 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 03:00:01.170:905) : pid=357622 uid=root auid=root ses=120 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 03:00:01.171:906) : pid=357624 uid=root auid=root ses=120 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 03:00:01.173:907) : pid=357622 uid=root auid=root ses=120 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 03:01:01.185:908) : pid=357829 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 03:01:01.186:909) : pid=357829 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 03:01:01.187:910) : pid=357829 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=121 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 03:01:01.187:910) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 03:01:01.187:910) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=357829 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=121 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 03:01:01.205:911) : pid=357829 uid=root auid=root ses=121 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 03:01:01.205:912) : pid=357831 uid=root auid=root ses=121 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 03:01:01.207:913) : pid=357829 uid=root auid=root ses=121 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 03:10:01.665:914) : pid=360028 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 03:10:01.667:915) : pid=360028 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 03:10:01.667:916) : pid=360028 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=122 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 03:10:01.667:916) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 03:10:01.667:916) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=360028 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=122 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 03:10:01.684:917) : pid=360028 uid=root auid=root ses=122 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 03:10:01.684:918) : pid=360030 uid=root auid=root ses=122 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 03:10:01.687:919) : pid=360028 uid=root auid=root ses=122 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 03:20:01.171:920) : pid=362282 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 03:20:01.172:921) : pid=362282 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 03:20:01.172:922) : pid=362282 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=123 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 03:20:01.172:922) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 03:20:01.172:922) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=362282 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=123 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 03:20:01.189:923) : pid=362282 uid=root auid=root ses=123 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 03:20:01.189:924) : pid=362284 uid=root auid=root ses=123 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 03:20:01.191:925) : pid=362282 uid=root auid=root ses=123 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 03:30:01.699:926) : pid=364521 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 03:30:01.700:927) : pid=364521 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 03:30:01.700:928) : pid=364521 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=124 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 03:30:01.700:928) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 03:30:01.700:928) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=364521 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=124 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 03:30:01.718:929) : pid=364521 uid=root auid=root ses=124 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 03:30:01.719:930) : pid=364523 uid=root auid=root ses=124 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 03:30:01.721:931) : pid=364521 uid=root auid=root ses=124 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 03:40:01.247:932) : pid=366722 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 03:40:01.248:933) : pid=366722 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 03:40:01.248:934) : pid=366722 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=125 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 03:40:01.248:934) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 03:40:01.248:934) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=366722 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=125 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 03:40:01.262:935) : pid=366722 uid=root auid=root ses=125 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 03:40:01.263:936) : pid=366724 uid=root auid=root ses=125 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 03:40:01.265:937) : pid=366722 uid=root auid=root ses=125 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 03:50:01.786:938) : pid=369033 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 03:50:01.787:939) : pid=369033 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 03:50:01.787:940) : pid=369033 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=126 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 03:50:01.787:940) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 03:50:01.787:940) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=369033 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=126 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 03:50:01.811:941) : pid=369033 uid=root auid=root ses=126 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 03:50:01.812:942) : pid=369035 uid=root auid=root ses=126 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 03:50:01.814:943) : pid=369033 uid=root auid=root ses=126 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 04:00:01.331:944) : pid=371487 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 04:00:01.332:945) : pid=371487 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 04:00:01.333:946) : pid=371487 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=127 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 04:00:01.333:946) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 04:00:01.333:946) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=371487 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=127 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 04:00:01.358:947) : pid=371487 uid=root auid=root ses=127 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:00:01.360:948) : pid=371489 uid=root auid=root ses=127 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 04:00:01.361:949) : pid=371487 uid=root auid=root ses=127 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 04:01:01.359:950) : pid=371652 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 04:01:01.361:951) : pid=371652 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 04:01:01.361:952) : pid=371652 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=128 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 04:01:01.361:952) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 04:01:01.361:952) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=371652 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=128 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 04:01:01.382:953) : pid=371652 uid=root auid=root ses=128 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:01:01.383:954) : pid=371655 uid=root auid=root ses=128 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 04:01:01.385:955) : pid=371652 uid=root auid=root ses=128 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 04:02:01.386:956) : pid=371866 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 04:02:01.387:957) : pid=371866 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 04:02:01.387:958) : pid=371866 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=129 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 04:02:01.387:958) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 04:02:01.387:958) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=371866 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=129 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 04:02:01.408:959) : pid=371866 uid=root auid=root ses=129 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:02:01.409:960) : pid=371868 uid=root auid=root ses=129 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:02:01.463:961) : pid=371928 uid=root auid=root ses=129 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 04:02:01.568:962) : pid=371866 uid=root auid=root ses=129 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 04:10:01.660:963) : pid=374065 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 04:10:01.661:964) : pid=374065 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 04:10:01.661:965) : pid=374065 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=130 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 04:10:01.661:965) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 04:10:01.661:965) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=374065 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=130 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 04:10:01.679:966) : pid=374065 uid=root auid=root ses=130 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:10:01.679:967) : pid=374067 uid=root auid=root ses=130 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 04:10:01.682:968) : pid=374065 uid=root auid=root ses=130 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 04:20:01.221:969) : pid=376319 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 04:20:01.222:970) : pid=376319 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 04:20:01.222:971) : pid=376319 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=131 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 04:20:01.222:971) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 04:20:01.222:971) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=376319 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=131 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 04:20:01.248:972) : pid=376319 uid=root auid=root ses=131 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:20:01.250:973) : pid=376321 uid=root auid=root ses=131 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 04:20:01.252:974) : pid=376319 uid=root auid=root ses=131 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 04:30:01.733:975) : pid=378621 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 04:30:01.734:976) : pid=378621 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 04:30:01.734:977) : pid=378621 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=132 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 04:30:01.734:977) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 04:30:01.734:977) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=378621 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=132 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 04:30:01.754:978) : pid=378621 uid=root auid=root ses=132 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:30:01.754:979) : pid=378624 uid=root auid=root ses=132 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 04:30:01.756:980) : pid=378621 uid=root auid=root ses=132 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 04:40:01.267:981) : pid=380826 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 04:40:01.269:982) : pid=380826 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 04:40:01.269:983) : pid=380826 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=133 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 04:40:01.269:983) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 04:40:01.269:983) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=380826 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=133 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 04:40:01.286:984) : pid=380826 uid=root auid=root ses=133 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:40:01.286:985) : pid=380828 uid=root auid=root ses=133 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 04:40:01.289:986) : pid=380826 uid=root auid=root ses=133 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 04:50:01.799:987) : pid=383060 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 04:50:01.800:988) : pid=383060 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 04:50:01.800:989) : pid=383060 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=134 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 04:50:01.800:989) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 04:50:01.800:989) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=383060 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=134 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 04:50:01.821:990) : pid=383060 uid=root auid=root ses=134 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 04:50:01.822:991) : pid=383062 uid=root auid=root ses=134 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 04:50:01.824:992) : pid=383060 uid=root auid=root ses=134 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 05:00:01.352:993) : pid=385501 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 05:00:01.353:994) : pid=385501 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 05:00:01.353:995) : pid=385501 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=135 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 05:00:01.353:995) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 05:00:01.353:995) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=385501 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=135 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 05:00:01.377:996) : pid=385501 uid=root auid=root ses=135 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 05:00:01.377:997) : pid=385503 uid=root auid=root ses=135 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 05:00:01.379:998) : pid=385501 uid=root auid=root ses=135 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 05:01:01.366:999) : pid=385709 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 05:01:01.367:1000) : pid=385709 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 05:01:01.368:1001) : pid=385709 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=136 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 05:01:01.368:1001) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 05:01:01.368:1001) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=385709 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=136 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 05:01:01.388:1002) : pid=385709 uid=root auid=root ses=136 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 05:01:01.389:1003) : pid=385712 uid=root auid=root ses=136 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 05:01:01.391:1004) : pid=385709 uid=root auid=root ses=136 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 05:10:01.823:1005) : pid=387953 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 05:10:01.824:1006) : pid=387953 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 05:10:01.824:1007) : pid=387953 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=137 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 05:10:01.824:1007) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 05:10:01.824:1007) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=387953 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=137 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 05:10:01.841:1008) : pid=387953 uid=root auid=root ses=137 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 05:10:01.841:1009) : pid=387955 uid=root auid=root ses=137 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 05:10:01.845:1010) : pid=387953 uid=root auid=root ses=137 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 05:20:01.346:1011) : pid=390284 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 05:20:01.347:1012) : pid=390284 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 05:20:01.347:1013) : pid=390284 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=138 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 05:20:01.347:1013) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 05:20:01.347:1013) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=390284 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=138 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 05:20:01.362:1014) : pid=390284 uid=root auid=root ses=138 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 05:20:01.363:1015) : pid=390286 uid=root auid=root ses=138 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 05:20:01.365:1016) : pid=390284 uid=root auid=root ses=138 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 05:30:01.859:1017) : pid=392502 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 05:30:01.860:1018) : pid=392502 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 05:30:01.860:1019) : pid=392502 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=139 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 05:30:01.860:1019) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 05:30:01.860:1019) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=392502 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=139 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 05:30:01.883:1020) : pid=392502 uid=root auid=root ses=139 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 05:30:01.884:1021) : pid=392504 uid=root auid=root ses=139 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 05:30:01.886:1022) : pid=392502 uid=root auid=root ses=139 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 05:40:01.388:1023) : pid=394923 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 05:40:01.389:1024) : pid=394923 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 05:40:01.389:1025) : pid=394923 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=140 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 05:40:01.389:1025) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 05:40:01.389:1025) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=394923 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=140 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 05:40:01.413:1026) : pid=394923 uid=root auid=root ses=140 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 05:40:01.414:1027) : pid=394925 uid=root auid=root ses=140 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 05:40:01.416:1028) : pid=394923 uid=root auid=root ses=140 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 05:50:01.905:1029) : pid=397137 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 05:50:01.906:1030) : pid=397137 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 05:50:01.906:1031) : pid=397137 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=141 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 05:50:01.906:1031) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 05:50:01.906:1031) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=397137 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=141 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 05:50:01.934:1032) : pid=397137 uid=root auid=root ses=141 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 05:50:01.935:1033) : pid=397139 uid=root auid=root ses=141 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 05:50:01.938:1034) : pid=397137 uid=root auid=root ses=141 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 06:00:01.417:1035) : pid=399586 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 06:00:01.417:1036) : pid=399586 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 06:00:01.417:1037) : pid=399586 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=142 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 06:00:01.417:1037) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 06:00:01.417:1037) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=399586 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=142 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 06:00:01.438:1038) : pid=399586 uid=root auid=root ses=142 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 06:00:01.438:1039) : pid=399588 uid=root auid=root ses=142 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 06:00:01.441:1040) : pid=399586 uid=root auid=root ses=142 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 06:01:01.447:1041) : pid=399791 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 06:01:01.448:1042) : pid=399791 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 06:01:01.449:1043) : pid=399791 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=143 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 06:01:01.449:1043) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 06:01:01.449:1043) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=399791 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=143 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 06:01:01.470:1044) : pid=399791 uid=root auid=root ses=143 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 06:01:01.471:1045) : pid=399793 uid=root auid=root ses=143 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 06:01:01.474:1046) : pid=399791 uid=root auid=root ses=143 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 06:10:01.921:1047) : pid=402050 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 06:10:01.922:1048) : pid=402050 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 06:10:01.923:1049) : pid=402050 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=144 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 06:10:01.923:1049) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 06:10:01.923:1049) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=402050 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=144 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 06:10:01.942:1050) : pid=402050 uid=root auid=root ses=144 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 06:10:01.943:1051) : pid=402052 uid=root auid=root ses=144 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 06:10:01.945:1052) : pid=402050 uid=root auid=root ses=144 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 06:20:01.466:1053) : pid=404360 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 06:20:01.467:1054) : pid=404360 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 06:20:01.467:1055) : pid=404360 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=145 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 06:20:01.467:1055) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 06:20:01.467:1055) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=404360 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=145 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 06:20:01.483:1056) : pid=404360 uid=root auid=root ses=145 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 06:20:01.483:1057) : pid=404362 uid=root auid=root ses=145 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 06:20:01.486:1058) : pid=404360 uid=root auid=root ses=145 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 06:30:02.026:1059) : pid=406851 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 06:30:02.028:1060) : pid=406851 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 06:30:02.028:1061) : pid=406851 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=146 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 06:30:02.028:1061) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 06:30:02.028:1061) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=406851 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=146 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 06:30:02.049:1062) : pid=406851 uid=root auid=root ses=146 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 06:30:02.049:1063) : pid=406853 uid=root auid=root ses=146 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 06:30:02.052:1064) : pid=406851 uid=root auid=root ses=146 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 06:40:01.590:1065) : pid=409115 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 06:40:01.591:1066) : pid=409115 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 06:40:01.591:1067) : pid=409115 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=147 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 06:40:01.591:1067) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 06:40:01.591:1067) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=409115 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=147 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 06:40:01.613:1068) : pid=409115 uid=root auid=root ses=147 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 06:40:01.614:1069) : pid=409117 uid=root auid=root ses=147 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 06:40:01.616:1070) : pid=409115 uid=root auid=root ses=147 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 06:50:01.117:1071) : pid=411245 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 06:50:01.118:1072) : pid=411245 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 06:50:01.119:1073) : pid=411245 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=148 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 06:50:01.119:1073) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 06:50:01.119:1073) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=411245 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=148 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 06:50:01.136:1074) : pid=411245 uid=root auid=root ses=148 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 06:50:01.137:1075) : pid=411247 uid=root auid=root ses=148 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 06:50:01.138:1076) : pid=411245 uid=root auid=root ses=148 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 07:00:01.667:1077) : pid=413627 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 07:00:01.669:1078) : pid=413627 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 07:00:01.669:1079) : pid=413627 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=149 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 07:00:01.669:1079) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 07:00:01.669:1079) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=413627 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=149 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 07:00:01.687:1080) : pid=413627 uid=root auid=root ses=149 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 07:00:01.688:1081) : pid=413629 uid=root auid=root ses=149 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 07:00:01.691:1082) : pid=413627 uid=root auid=root ses=149 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 07:01:01.701:1083) : pid=413837 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 07:01:01.702:1084) : pid=413837 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 07:01:01.702:1085) : pid=413837 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=150 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 07:01:01.702:1085) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 07:01:01.702:1085) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=413837 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=150 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 07:01:01.720:1086) : pid=413837 uid=root auid=root ses=150 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 07:01:01.721:1087) : pid=413839 uid=root auid=root ses=150 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 07:01:01.723:1088) : pid=413837 uid=root auid=root ses=150 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 07:10:01.187:1089) : pid=415905 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 07:10:01.188:1090) : pid=415905 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 07:10:01.189:1091) : pid=415905 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=151 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 07:10:01.189:1091) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 07:10:01.189:1091) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=415905 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=151 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 07:10:01.211:1092) : pid=415905 uid=root auid=root ses=151 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 07:10:01.211:1093) : pid=415907 uid=root auid=root ses=151 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 07:10:01.213:1094) : pid=415905 uid=root auid=root ses=151 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 07:20:01.730:1095) : pid=418281 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 07:20:01.731:1096) : pid=418281 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 07:20:01.731:1097) : pid=418281 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=152 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 07:20:01.731:1097) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 07:20:01.731:1097) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=418281 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=152 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 07:20:01.752:1098) : pid=418281 uid=root auid=root ses=152 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 07:20:01.753:1099) : pid=418283 uid=root auid=root ses=152 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 07:20:01.754:1100) : pid=418281 uid=root auid=root ses=152 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 07:30:01.292:1101) : pid=420540 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 07:30:01.293:1102) : pid=420540 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 07:30:01.293:1103) : pid=420540 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=153 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 07:30:01.293:1103) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 07:30:01.293:1103) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=420540 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=153 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 07:30:01.309:1104) : pid=420540 uid=root auid=root ses=153 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 07:30:01.310:1105) : pid=420542 uid=root auid=root ses=153 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 07:30:01.311:1106) : pid=420540 uid=root auid=root ses=153 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 07:40:01.801:1107) : pid=422825 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 07:40:01.802:1108) : pid=422825 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 07:40:01.802:1109) : pid=422825 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=154 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 07:40:01.802:1109) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 07:40:01.802:1109) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=422825 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=154 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 07:40:01.818:1110) : pid=422825 uid=root auid=root ses=154 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 07:40:01.818:1111) : pid=422827 uid=root auid=root ses=154 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 07:40:01.821:1112) : pid=422825 uid=root auid=root ses=154 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 07:50:01.369:1113) : pid=424965 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 07:50:01.369:1114) : pid=424965 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 07:50:01.369:1115) : pid=424965 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=155 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 07:50:01.369:1115) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 07:50:01.369:1115) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=424965 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=155 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 07:50:01.383:1116) : pid=424965 uid=root auid=root ses=155 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 07:50:01.383:1117) : pid=424967 uid=root auid=root ses=155 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 07:50:01.386:1118) : pid=424965 uid=root auid=root ses=155 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 08:00:01.916:1119) : pid=427411 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 08:00:01.918:1120) : pid=427411 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 08:00:01.918:1121) : pid=427411 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=156 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 08:00:01.918:1121) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 08:00:01.918:1121) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=427411 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=156 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 08:00:01.942:1122) : pid=427411 uid=root auid=root ses=156 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 08:00:01.943:1123) : pid=427413 uid=root auid=root ses=156 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 08:00:01.945:1124) : pid=427411 uid=root auid=root ses=156 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 08:01:01.944:1125) : pid=427577 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 08:01:01.945:1126) : pid=427577 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 08:01:01.945:1127) : pid=427577 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=157 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 08:01:01.945:1127) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 08:01:01.945:1127) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=427577 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=157 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 08:01:01.957:1128) : pid=427577 uid=root auid=root ses=157 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 08:01:01.958:1129) : pid=427580 uid=root auid=root ses=157 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 08:01:01.962:1130) : pid=427577 uid=root auid=root ses=157 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 08:10:01.439:1131) : pid=429701 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 08:10:01.440:1132) : pid=429701 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 08:10:01.440:1133) : pid=429701 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=158 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 08:10:01.440:1133) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 08:10:01.440:1133) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=429701 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=158 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 08:10:01.457:1134) : pid=429701 uid=root auid=root ses=158 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 08:10:01.458:1135) : pid=429703 uid=root auid=root ses=158 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 08:10:01.460:1136) : pid=429701 uid=root auid=root ses=158 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 08:20:01.890:1137) : pid=431946 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 08:20:01.891:1138) : pid=431946 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 08:20:01.891:1139) : pid=431946 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=159 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 08:20:01.891:1139) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 08:20:01.891:1139) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=431946 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=159 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 08:20:01.914:1140) : pid=431946 uid=root auid=root ses=159 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 08:20:01.914:1141) : pid=431948 uid=root auid=root ses=159 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 08:20:01.916:1142) : pid=431946 uid=root auid=root ses=159 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 08:30:01.435:1143) : pid=434291 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 08:30:01.436:1144) : pid=434291 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 08:30:01.436:1145) : pid=434291 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=160 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 08:30:01.436:1145) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 08:30:01.436:1145) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=434291 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=160 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 08:30:01.452:1146) : pid=434291 uid=root auid=root ses=160 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 08:30:01.453:1147) : pid=434293 uid=root auid=root ses=160 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 08:30:01.455:1148) : pid=434291 uid=root auid=root ses=160 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 08:40:01.944:1149) : pid=436489 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 08:40:01.946:1150) : pid=436489 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 08:40:01.946:1151) : pid=436489 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=161 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 08:40:01.946:1151) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 08:40:01.946:1151) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=436489 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=161 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 08:40:01.966:1152) : pid=436489 uid=root auid=root ses=161 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 08:40:01.966:1153) : pid=436491 uid=root auid=root ses=161 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 08:40:01.969:1154) : pid=436489 uid=root auid=root ses=161 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 08:50:01.482:1155) : pid=438786 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 08:50:01.484:1156) : pid=438786 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 08:50:01.484:1157) : pid=438786 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=162 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 08:50:01.484:1157) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 08:50:01.484:1157) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=438786 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=162 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 08:50:01.504:1158) : pid=438786 uid=root auid=root ses=162 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 08:50:01.505:1159) : pid=438794 uid=root auid=root ses=162 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 08:50:01.507:1160) : pid=438786 uid=root auid=root ses=162 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:00:02.006:1161) : pid=441223 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:00:02.007:1162) : pid=441223 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:00:02.007:1163) : pid=441223 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=163 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:00:02.007:1163) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 09:00:02.007:1163) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=441223 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=163 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:00:02.025:1164) : pid=441223 uid=root auid=root ses=163 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:00:02.026:1165) : pid=441225 uid=root auid=root ses=163 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 09:00:02.027:1166) : pid=441223 uid=root auid=root ses=163 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:01:01.039:1167) : pid=441425 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:01:01.040:1168) : pid=441425 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:01:01.040:1169) : pid=441425 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=164 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:01:01.040:1169) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 09:01:01.040:1169) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=441425 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=164 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:01:01.054:1170) : pid=441425 uid=root auid=root ses=164 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:01:01.055:1171) : pid=441428 uid=root auid=root ses=164 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 09:01:01.058:1172) : pid=441425 uid=root auid=root ses=164 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:10:01.507:1173) : pid=443587 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:10:01.508:1174) : pid=443587 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:10:01.508:1175) : pid=443587 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=165 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:10:01.508:1175) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 09:10:01.508:1175) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=443587 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=165 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:10:01.524:1176) : pid=443587 uid=root auid=root ses=165 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:10:01.525:1177) : pid=443589 uid=root auid=root ses=165 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 09:10:01.527:1178) : pid=443587 uid=root auid=root ses=165 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:20:02.056:1179) : pid=445842 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:20:02.057:1180) : pid=445842 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:20:02.058:1181) : pid=445842 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=166 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:20:02.058:1181) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 09:20:02.058:1181) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=445842 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=166 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:20:02.073:1182) : pid=445842 uid=root auid=root ses=166 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:20:02.074:1183) : pid=445844 uid=root auid=root ses=166 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 09:20:02.077:1184) : pid=445842 uid=root auid=root ses=166 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:30:01.553:1185) : pid=448148 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:30:01.555:1186) : pid=448148 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:30:01.555:1187) : pid=448148 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=167 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:30:01.555:1187) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 09:30:01.555:1187) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=448148 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=167 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:30:01.581:1188) : pid=448148 uid=root auid=root ses=167 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:30:01.581:1189) : pid=448150 uid=root auid=root ses=167 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 09:30:01.584:1190) : pid=448148 uid=root auid=root ses=167 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:40:01.084:1191) : pid=450489 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:40:01.084:1192) : pid=450489 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:40:01.084:1193) : pid=450489 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=168 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:40:01.084:1193) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 09:40:01.084:1193) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=450489 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=168 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:40:01.101:1194) : pid=450489 uid=root auid=root ses=168 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:40:01.102:1195) : pid=450491 uid=root auid=root ses=168 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 09:40:01.105:1196) : pid=450489 uid=root auid=root ses=168 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:50:01.599:1197) : pid=452724 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:50:01.600:1198) : pid=452724 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:50:01.600:1199) : pid=452724 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=169 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:50:01.600:1199) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 09:50:01.600:1199) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=452724 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=169 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:50:01.616:1200) : pid=452724 uid=root auid=root ses=169 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:50:01.616:1201) : pid=452726 uid=root auid=root ses=169 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 09:50:01.617:1202) : pid=452724 uid=root auid=root ses=169 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:54:09.318:1203) : pid=453801 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:54:09.327:1204) : pid=453801 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:54:09.329:1205) : pid=453801 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:54:09.329:1206) : pid=453801 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=170 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:54:09.329:1206) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 09:54:09.329:1206) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffe4db583f0 a2=0x3 a3=0x7f8972e9f459 items=0 ppid=2835 pid=453801 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=170 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:54:09.347:1207) : pid=453801 uid=root auid=datapk ses=170 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:54:09.349:1208) : pid=453819 uid=root auid=datapk ses=170 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:54:09.404:1209) : pid=453818 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:54:09.413:1210) : pid=453818 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:54:09.415:1211) : pid=453818 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 09:54:09.415:1212) : pid=453818 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=171 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 09:54:09.415:1212) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 09:54:09.415:1212) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7fffdb1d5850 a2=0x3 a3=0x7f588dd04459 items=0 ppid=2835 pid=453818 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=171 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 09:54:09.433:1213) : pid=453818 uid=root auid=datapk ses=171 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:54:09.434:1214) : pid=453824 uid=root auid=datapk ses=171 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_LOGIN msg=audit(12.03.2026 09:54:11.861:1215) : pid=453801 uid=root auid=datapk ses=170 msg='op=login id=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=/dev/pts/0 res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 09:54:22.019:1216) : pid=453915 uid=datapk auid=datapk ses=170 msg='op=PAM:authentication grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 09:54:22.020:1217) : pid=453915 uid=datapk auid=datapk ses=170 msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_START msg=audit(12.03.2026 09:54:22.020:1218) : pid=453915 uid=datapk auid=datapk ses=170 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 09:54:22.020:1219) : pid=453915 uid=datapk auid=datapk ses=170 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 10:00:01.134:1220) : pid=457740 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 10:00:01.134:1221) : pid=457740 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 10:00:01.134:1222) : pid=457740 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=172 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 10:00:01.134:1222) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 10:00:01.134:1222) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=457740 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=172 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 10:00:01.156:1223) : pid=457740 uid=root auid=root ses=172 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 10:00:01.157:1224) : pid=457742 uid=root auid=root ses=172 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 10:00:01.159:1225) : pid=457740 uid=root auid=root ses=172 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 10:01:01.144:1226) : pid=458304 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 10:01:01.145:1227) : pid=458304 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 10:01:01.146:1228) : pid=458304 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=173 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 10:01:01.146:1228) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 10:01:01.146:1228) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=458304 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=173 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 10:01:01.173:1229) : pid=458304 uid=root auid=root ses=173 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 10:01:01.175:1230) : pid=458306 uid=root auid=root ses=173 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 10:01:01.177:1231) : pid=458304 uid=root auid=root ses=173 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 10:10:01.610:1232) : pid=464040 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 10:10:01.612:1233) : pid=464040 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 10:10:01.612:1234) : pid=464040 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=174 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 10:10:01.612:1234) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 10:10:01.612:1234) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=464040 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=174 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 10:10:01.629:1235) : pid=464040 uid=root auid=root ses=174 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 10:10:01.629:1236) : pid=464042 uid=root auid=root ses=174 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 10:10:01.632:1237) : pid=464040 uid=root auid=root ses=174 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 10:20:01.168:1238) : pid=470177 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 10:20:01.168:1239) : pid=470177 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 10:20:01.169:1240) : pid=470177 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=175 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 10:20:01.169:1240) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 10:20:01.169:1240) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=470177 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=175 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 10:20:01.185:1241) : pid=470177 uid=root auid=root ses=175 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 10:20:01.185:1242) : pid=470179 uid=root auid=root ses=175 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 10:20:01.187:1243) : pid=470177 uid=root auid=root ses=175 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 10:30:01.686:1244) : pid=476503 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 10:30:01.687:1245) : pid=476503 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 10:30:01.688:1246) : pid=476503 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=176 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 10:30:01.688:1246) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 10:30:01.688:1246) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=476503 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=176 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 10:30:01.706:1247) : pid=476503 uid=root auid=root ses=176 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 10:30:01.706:1248) : pid=476505 uid=root auid=root ses=176 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 10:30:01.708:1249) : pid=476503 uid=root auid=root ses=176 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 10:40:01.232:1250) : pid=482589 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 10:40:01.233:1251) : pid=482589 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 10:40:01.234:1252) : pid=482589 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=177 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 10:40:01.234:1252) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 10:40:01.234:1252) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=482589 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=177 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 10:40:01.254:1253) : pid=482589 uid=root auid=root ses=177 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 10:40:01.255:1254) : pid=482591 uid=root auid=root ses=177 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 10:40:01.258:1255) : pid=482589 uid=root auid=root ses=177 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 10:50:01.795:1256) : pid=488699 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 10:50:01.797:1257) : pid=488699 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 10:50:01.797:1258) : pid=488699 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=178 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 10:50:01.797:1258) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 10:50:01.797:1258) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=488699 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=178 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 10:50:01.820:1259) : pid=488699 uid=root auid=root ses=178 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 10:50:01.820:1260) : pid=488701 uid=root auid=root ses=178 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 10:50:01.822:1261) : pid=488699 uid=root auid=root ses=178 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 10:54:26.475:1262) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 10:54:26.486:1263) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 11:00:01.309:1264) : pid=493320 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:00:01.310:1265) : pid=493320 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:00:01.310:1266) : pid=493320 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=179 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:00:01.310:1266) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 11:00:01.310:1266) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=493320 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=179 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:00:01.328:1267) : pid=493320 uid=root auid=root ses=179 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:00:01.329:1268) : pid=493322 uid=root auid=root ses=179 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 11:00:01.331:1269) : pid=493320 uid=root auid=root ses=179 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 11:01:01.294:1270) : pid=493488 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:01:01.295:1271) : pid=493488 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:01:01.295:1272) : pid=493488 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=180 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:01:01.295:1272) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 11:01:01.295:1272) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=493488 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=180 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:01:01.313:1273) : pid=493488 uid=root auid=root ses=180 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:01:01.314:1274) : pid=493490 uid=root auid=root ses=180 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 11:01:01.316:1275) : pid=493488 uid=root auid=root ses=180 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 11:01:44.100:1276) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 11:01:44.117:1277) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 11:10:01.782:1278) : pid=496051 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:10:01.783:1279) : pid=496051 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:10:01.783:1280) : pid=496051 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=181 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:10:01.783:1280) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 11:10:01.783:1280) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=496051 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=181 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:10:01.799:1281) : pid=496051 uid=root auid=root ses=181 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:10:01.799:1282) : pid=496053 uid=root auid=root ses=181 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 11:10:01.801:1283) : pid=496051 uid=root auid=root ses=181 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 11:10:52.591:1284) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 11:10:52.602:1285) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 11:13:49.008:1286) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 11:13:49.020:1287) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 11:17:55.714:1288) : pid=498107 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:17:55.717:1289) : pid=498107 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:17:55.718:1290) : pid=498107 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:17:55.718:1291) : pid=498107 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=182 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:17:55.718:1291) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 11:17:55.718:1291) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffd76188e00 a2=0x3 a3=0x7f3df6f25459 items=0 ppid=2835 pid=498107 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=182 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:17:55.739:1292) : pid=498107 uid=root auid=datapk ses=182 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:17:55.740:1293) : pid=498112 uid=root auid=datapk ses=182 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 11:18:09.144:1294) : pid=498107 uid=root auid=datapk ses=182 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 11:18:09.144:1295) : pid=498107 uid=root auid=datapk ses=182 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 11:19:01.021:1296) : pid=498781 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:19:01.032:1297) : pid=498781 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:19:01.033:1298) : pid=498781 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:19:01.034:1299) : pid=498781 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=183 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:19:01.034:1299) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 11:19:01.034:1299) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7fff19e24ff0 a2=0x3 a3=0x7f81473d2459 items=0 ppid=2835 pid=498781 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=183 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:19:01.049:1300) : pid=498781 uid=root auid=datapk ses=183 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:19:01.050:1301) : pid=498974 uid=root auid=datapk ses=183 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 11:20:01.318:1302) : pid=499715 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:20:01.319:1303) : pid=499715 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:20:01.319:1304) : pid=499715 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=184 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:20:01.319:1304) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 11:20:01.319:1304) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=499715 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=184 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:20:01.336:1305) : pid=499715 uid=root auid=root ses=184 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:20:01.337:1306) : pid=499717 uid=root auid=root ses=184 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 11:20:01.339:1307) : pid=499715 uid=root auid=root ses=184 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 11:24:38.720:1308) : proctitle=/usr/bin/suricata -c /run/udv/suricata-wrapper/suricata.yml -s /run/udv/suricata-wrapper/suricata.rules -vv --af-packet 
type=SYSCALL msg=audit(12.03.2026 11:24:38.720:1308) : arch=x86_64 syscall=setsockopt success=yes exit=0 a0=0x9 a1=SOL_PACKET a2=PACKET_ADD_MEMBERSHIP a3=0x7f0084fc2240 items=0 ppid=1 pid=497049 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=W#02-ens34 exe=/usr/bin/suricata key=(null) 
type=ANOM_PROMISCUOUS msg=audit(12.03.2026 11:24:38.720:1308) : dev=ens34 prom=yes old_prom=no auid=unset uid=root gid=root ses=unset 
----
type=USER_AUTH msg=audit(12.03.2026 11:30:01.844:1309) : pid=505630 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:30:01.846:1310) : pid=505630 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:30:01.846:1311) : pid=505630 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=185 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:30:01.846:1311) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 11:30:01.846:1311) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=505630 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=185 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:30:01.856:1312) : pid=505630 uid=root auid=root ses=185 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:30:01.857:1313) : pid=505632 uid=root auid=root ses=185 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 11:30:01.859:1314) : pid=505630 uid=root auid=root ses=185 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 11:40:01.396:1315) : pid=511726 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:40:01.396:1316) : pid=511726 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:40:01.396:1317) : pid=511726 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=186 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:40:01.396:1317) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 11:40:01.396:1317) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=511726 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=186 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:40:01.408:1318) : pid=511726 uid=root auid=root ses=186 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:40:01.408:1319) : pid=511734 uid=root auid=root ses=186 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 11:40:01.409:1320) : pid=511726 uid=root auid=root ses=186 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 11:41:43.577:1321) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-tmpfiles-clean comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 11:41:43.577:1322) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-tmpfiles-clean comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 11:50:01.926:1323) : pid=517851 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 11:50:01.927:1324) : pid=517851 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 11:50:01.927:1325) : pid=517851 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=187 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 11:50:01.927:1325) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 11:50:01.927:1325) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=517851 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=187 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 11:50:01.941:1326) : pid=517851 uid=root auid=root ses=187 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 11:50:01.942:1327) : pid=517859 uid=root auid=root ses=187 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 11:50:01.944:1328) : pid=517851 uid=root auid=root ses=187 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 12:00:01.440:1329) : pid=523997 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 12:00:01.441:1330) : pid=523997 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 12:00:01.441:1331) : pid=523997 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=188 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 12:00:01.441:1331) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 12:00:01.441:1331) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=523997 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=188 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 12:00:01.455:1332) : pid=523997 uid=root auid=root ses=188 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 12:00:01.456:1333) : pid=523999 uid=root auid=root ses=188 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 12:00:01.458:1334) : pid=523997 uid=root auid=root ses=188 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 12:01:01.481:1335) : pid=524562 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 12:01:01.482:1336) : pid=524562 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 12:01:01.482:1337) : pid=524562 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=189 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 12:01:01.482:1337) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 12:01:01.482:1337) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=524562 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=189 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 12:01:01.495:1338) : pid=524562 uid=root auid=root ses=189 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 12:01:01.495:1339) : pid=524564 uid=root auid=root ses=189 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 12:01:01.499:1340) : pid=524562 uid=root auid=root ses=189 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 12:10:01.901:1341) : pid=530200 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 12:10:01.903:1342) : pid=530200 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 12:10:01.903:1343) : pid=530200 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=190 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 12:10:01.903:1343) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 12:10:01.903:1343) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=530200 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=190 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 12:10:01.923:1344) : pid=530200 uid=root auid=root ses=190 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 12:10:01.924:1345) : pid=530202 uid=root auid=root ses=190 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 12:10:01.926:1346) : pid=530200 uid=root auid=root ses=190 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 12:20:01.448:1347) : pid=536157 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 12:20:01.449:1348) : pid=536157 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 12:20:01.449:1349) : pid=536157 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=191 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 12:20:01.449:1349) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 12:20:01.449:1349) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=536157 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=191 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 12:20:01.466:1350) : pid=536157 uid=root auid=root ses=191 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 12:20:01.467:1351) : pid=536159 uid=root auid=root ses=191 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 12:20:01.470:1352) : pid=536157 uid=root auid=root ses=191 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 12:30:01.978:1353) : pid=542812 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 12:30:01.979:1354) : pid=542812 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 12:30:01.979:1355) : pid=542812 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=192 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 12:30:01.979:1355) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 12:30:01.979:1355) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=542812 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=192 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 12:30:01.993:1356) : pid=542812 uid=root auid=root ses=192 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 12:30:01.994:1357) : pid=542814 uid=root auid=root ses=192 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 12:30:01.995:1358) : pid=542812 uid=root auid=root ses=192 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 12:40:01.522:1359) : pid=550445 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 12:40:01.524:1360) : pid=550445 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 12:40:01.524:1361) : pid=550445 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=193 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 12:40:01.524:1361) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 12:40:01.524:1361) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=550445 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=193 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 12:40:01.542:1362) : pid=550445 uid=root auid=root ses=193 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 12:40:01.543:1363) : pid=550447 uid=root auid=root ses=193 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 12:40:01.544:1364) : pid=550445 uid=root auid=root ses=193 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 12:50:01.057:1365) : pid=557156 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 12:50:01.058:1366) : pid=557156 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 12:50:01.059:1367) : pid=557156 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=194 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 12:50:01.059:1367) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 12:50:01.059:1367) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=557156 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=194 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 12:50:01.069:1368) : pid=557156 uid=root auid=root ses=194 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 12:50:01.069:1369) : pid=557158 uid=root auid=root ses=194 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 12:50:01.072:1370) : pid=557156 uid=root auid=root ses=194 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 13:00:01.588:1371) : pid=564334 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 13:00:01.589:1372) : pid=564334 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 13:00:01.590:1373) : pid=564334 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=195 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 13:00:01.590:1373) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 13:00:01.590:1373) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=564334 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=195 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 13:00:01.604:1374) : pid=564334 uid=root auid=root ses=195 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 13:00:01.605:1375) : pid=564336 uid=root auid=root ses=195 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 13:00:01.608:1376) : pid=564334 uid=root auid=root ses=195 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 13:01:01.625:1377) : pid=564945 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 13:01:01.626:1378) : pid=564945 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 13:01:01.626:1379) : pid=564945 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=196 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 13:01:01.626:1379) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 13:01:01.626:1379) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=564945 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=196 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 13:01:01.645:1380) : pid=564945 uid=root auid=root ses=196 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 13:01:01.646:1381) : pid=564947 uid=root auid=root ses=196 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 13:01:01.649:1382) : pid=564945 uid=root auid=root ses=196 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 13:10:01.101:1383) : pid=571253 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 13:10:01.105:1384) : pid=571253 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 13:10:01.106:1385) : pid=571253 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=197 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 13:10:01.106:1385) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 13:10:01.106:1385) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=571253 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=197 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 13:10:01.132:1386) : pid=571253 uid=root auid=root ses=197 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 13:10:01.133:1387) : pid=571255 uid=root auid=root ses=197 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 13:10:01.136:1388) : pid=571253 uid=root auid=root ses=197 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 13:20:01.618:1389) : pid=577590 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 13:20:01.620:1390) : pid=577590 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 13:20:01.621:1391) : pid=577590 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=198 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 13:20:01.621:1391) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 13:20:01.621:1391) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=577590 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=198 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 13:20:01.635:1392) : pid=577590 uid=root auid=root ses=198 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 13:20:01.636:1393) : pid=577592 uid=root auid=root ses=198 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 13:20:01.637:1394) : pid=577590 uid=root auid=root ses=198 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 13:30:01.169:1395) : pid=583859 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 13:30:01.170:1396) : pid=583859 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 13:30:01.170:1397) : pid=583859 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=199 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 13:30:01.170:1397) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 13:30:01.170:1397) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=583859 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=199 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 13:30:01.188:1398) : pid=583859 uid=root auid=root ses=199 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 13:30:01.189:1399) : pid=583861 uid=root auid=root ses=199 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 13:30:01.190:1400) : pid=583859 uid=root auid=root ses=199 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 13:40:01.707:1401) : pid=589930 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 13:40:01.708:1402) : pid=589930 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 13:40:01.708:1403) : pid=589930 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=200 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 13:40:01.708:1403) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 13:40:01.708:1403) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=589930 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=200 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 13:40:01.726:1404) : pid=589930 uid=root auid=root ses=200 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 13:40:01.727:1405) : pid=589932 uid=root auid=root ses=200 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 13:40:01.729:1406) : pid=589930 uid=root auid=root ses=200 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 13:50:01.209:1407) : pid=596198 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 13:50:01.210:1408) : pid=596198 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 13:50:01.210:1409) : pid=596198 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=201 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 13:50:01.210:1409) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 13:50:01.210:1409) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=596198 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=201 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 13:50:01.224:1410) : pid=596198 uid=root auid=root ses=201 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 13:50:01.225:1411) : pid=596200 uid=root auid=root ses=201 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 13:50:01.230:1412) : pid=596198 uid=root auid=root ses=201 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 14:00:01.729:1413) : pid=602414 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 14:00:01.730:1414) : pid=602414 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 14:00:01.731:1415) : pid=602414 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=202 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 14:00:01.731:1415) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 14:00:01.731:1415) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=602414 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=202 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 14:00:01.758:1416) : pid=602414 uid=root auid=root ses=202 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 14:00:01.758:1417) : pid=602416 uid=root auid=root ses=202 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 14:00:01.761:1418) : pid=602414 uid=root auid=root ses=202 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 14:01:01.757:1419) : pid=602983 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 14:01:01.758:1420) : pid=602983 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 14:01:01.758:1421) : pid=602983 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=203 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 14:01:01.758:1421) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 14:01:01.758:1421) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=602983 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=203 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 14:01:01.777:1422) : pid=602983 uid=root auid=root ses=203 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 14:01:01.777:1423) : pid=602985 uid=root auid=root ses=203 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 14:01:01.781:1424) : pid=602983 uid=root auid=root ses=203 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 14:10:01.235:1425) : pid=608650 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 14:10:01.236:1426) : pid=608650 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 14:10:01.236:1427) : pid=608650 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=204 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 14:10:01.236:1427) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 14:10:01.236:1427) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=608650 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=204 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 14:10:01.253:1428) : pid=608650 uid=root auid=root ses=204 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 14:10:01.253:1429) : pid=608652 uid=root auid=root ses=204 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 14:10:01.256:1430) : pid=608650 uid=root auid=root ses=204 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 14:20:01.781:1431) : pid=614578 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 14:20:01.782:1432) : pid=614578 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 14:20:01.782:1433) : pid=614578 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=205 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 14:20:01.782:1433) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 14:20:01.782:1433) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=614578 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=205 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 14:20:01.797:1434) : pid=614578 uid=root auid=root ses=205 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 14:20:01.798:1435) : pid=614580 uid=root auid=root ses=205 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 14:20:01.800:1436) : pid=614578 uid=root auid=root ses=205 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 14:30:01.328:1437) : pid=621102 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 14:30:01.329:1438) : pid=621102 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 14:30:01.330:1439) : pid=621102 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=206 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 14:30:01.330:1439) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 14:30:01.330:1439) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=621102 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=206 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 14:30:01.356:1440) : pid=621102 uid=root auid=root ses=206 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 14:30:01.357:1441) : pid=621104 uid=root auid=root ses=206 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 14:30:01.360:1442) : pid=621102 uid=root auid=root ses=206 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 14:40:01.824:1443) : pid=627227 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 14:40:01.825:1444) : pid=627227 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 14:40:01.826:1445) : pid=627227 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=207 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 14:40:01.826:1445) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 14:40:01.826:1445) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=627227 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=207 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 14:40:01.845:1446) : pid=627227 uid=root auid=root ses=207 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 14:40:01.845:1447) : pid=627229 uid=root auid=root ses=207 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 14:40:01.847:1448) : pid=627227 uid=root auid=root ses=207 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 14:50:01.349:1449) : pid=633763 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 14:50:01.351:1450) : pid=633763 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 14:50:01.351:1451) : pid=633763 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=208 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 14:50:01.351:1451) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 14:50:01.351:1451) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=633763 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=208 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 14:50:01.369:1452) : pid=633763 uid=root auid=root ses=208 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 14:50:01.370:1453) : pid=633765 uid=root auid=root ses=208 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 14:50:01.372:1454) : pid=633763 uid=root auid=root ses=208 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:00:01.891:1455) : pid=637263 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:00:01.892:1456) : pid=637263 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:00:01.892:1457) : pid=637263 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=209 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:00:01.892:1457) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 15:00:01.892:1457) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=637263 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=209 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:00:01.910:1458) : pid=637263 uid=root auid=root ses=209 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:00:01.911:1459) : pid=637265 uid=root auid=root ses=209 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 15:00:01.913:1460) : pid=637263 uid=root auid=root ses=209 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:01:01.924:1461) : pid=637558 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:01:01.925:1462) : pid=637558 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:01:01.926:1463) : pid=637558 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=210 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:01:01.926:1463) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 15:01:01.926:1463) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=637558 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=210 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:01:01.943:1464) : pid=637558 uid=root auid=root ses=210 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:01:01.944:1465) : pid=637560 uid=root auid=root ses=210 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 15:01:01.946:1466) : pid=637558 uid=root auid=root ses=210 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:06:09.406:1467) : pid=640655 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:06:09.420:1468) : pid=640655 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:06:09.421:1469) : pid=640655 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:06:09.421:1470) : pid=640655 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=211 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:06:09.421:1470) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 15:06:09.421:1470) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7fffd4726ba0 a2=0x3 a3=0x7f0170de1459 items=0 ppid=2835 pid=640655 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=211 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:06:09.439:1471) : pid=640655 uid=root auid=datapk ses=211 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:06:09.441:1472) : pid=640660 uid=root auid=datapk ses=211 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 15:06:17.824:1473) : pid=640655 uid=root auid=datapk ses=211 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 15:06:17.824:1474) : pid=640655 uid=root auid=datapk ses=211 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:07:48.315:1475) : pid=641743 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:07:48.329:1476) : pid=641743 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:07:48.330:1477) : pid=641743 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:07:48.331:1478) : pid=641743 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=212 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:07:48.331:1478) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 15:07:48.331:1478) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffc6a4b4160 a2=0x3 a3=0x7f50f7133459 items=0 ppid=2835 pid=641743 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=212 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:07:48.346:1479) : pid=641743 uid=root auid=datapk ses=212 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:07:48.347:1480) : pid=641748 uid=root auid=datapk ses=212 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 15:07:51.709:1481) : pid=641743 uid=root auid=datapk ses=212 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 15:07:51.709:1482) : pid=641743 uid=root auid=datapk ses=212 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:10:01.386:1483) : pid=643508 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:10:01.388:1484) : pid=643508 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:10:01.388:1485) : pid=643508 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=213 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:10:01.388:1485) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 15:10:01.388:1485) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=643508 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=213 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:10:01.408:1486) : pid=643508 uid=root auid=root ses=213 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:10:01.408:1487) : pid=643510 uid=root auid=root ses=213 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 15:10:01.411:1488) : pid=643508 uid=root auid=root ses=213 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:20:01.932:1489) : pid=650022 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:20:01.934:1490) : pid=650022 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:20:01.934:1491) : pid=650022 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=214 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:20:01.934:1491) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 15:20:01.934:1491) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=650022 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=214 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:20:01.959:1492) : pid=650022 uid=root auid=root ses=214 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:20:01.959:1493) : pid=650024 uid=root auid=root ses=214 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 15:20:01.961:1494) : pid=650022 uid=root auid=root ses=214 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:30:01.481:1495) : pid=656981 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:30:01.481:1496) : pid=656981 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:30:01.481:1497) : pid=656981 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=215 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:30:01.481:1497) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 15:30:01.481:1497) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=656981 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=215 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:30:01.504:1498) : pid=656981 uid=root auid=root ses=215 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:30:01.504:1499) : pid=656983 uid=root auid=root ses=215 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 15:30:01.506:1500) : pid=656981 uid=root auid=root ses=215 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:40:01.992:1501) : pid=663773 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:40:01.993:1502) : pid=663773 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:40:01.993:1503) : pid=663773 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=216 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:40:01.993:1503) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 15:40:01.993:1503) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=663773 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=216 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:40:02.017:1504) : pid=663773 uid=root auid=root ses=216 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:40:02.017:1505) : pid=663775 uid=root auid=root ses=216 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 15:40:02.019:1506) : pid=663773 uid=root auid=root ses=216 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 15:50:01.527:1507) : pid=670497 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 15:50:01.528:1508) : pid=670497 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 15:50:01.528:1509) : pid=670497 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=217 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 15:50:01.528:1509) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 15:50:01.528:1509) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=670497 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=217 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 15:50:01.546:1510) : pid=670497 uid=root auid=root ses=217 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 15:50:01.547:1511) : pid=670499 uid=root auid=root ses=217 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 15:50:01.549:1512) : pid=670497 uid=root auid=root ses=217 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 16:00:01.072:1513) : pid=676810 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 16:00:01.073:1514) : pid=676810 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 16:00:01.074:1515) : pid=676810 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=218 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 16:00:01.074:1515) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 16:00:01.074:1515) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=676810 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=218 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 16:00:01.100:1516) : pid=676810 uid=root auid=root ses=218 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 16:00:01.101:1517) : pid=676812 uid=root auid=root ses=218 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 16:00:01.103:1518) : pid=676810 uid=root auid=root ses=218 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 16:01:01.099:1519) : pid=677504 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 16:01:01.100:1520) : pid=677504 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 16:01:01.100:1521) : pid=677504 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=219 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 16:01:01.100:1521) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 16:01:01.100:1521) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=677504 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=219 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 16:01:01.119:1522) : pid=677504 uid=root auid=root ses=219 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 16:01:01.120:1523) : pid=677506 uid=root auid=root ses=219 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 16:01:01.122:1524) : pid=677504 uid=root auid=root ses=219 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 16:10:01.575:1525) : pid=683442 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 16:10:01.576:1526) : pid=683442 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 16:10:01.577:1527) : pid=683442 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=220 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 16:10:01.577:1527) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 16:10:01.577:1527) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=683442 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=220 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 16:10:01.594:1528) : pid=683442 uid=root auid=root ses=220 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 16:10:01.595:1529) : pid=683444 uid=root auid=root ses=220 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 16:10:01.596:1530) : pid=683442 uid=root auid=root ses=220 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 16:20:01.081:1531) : pid=689797 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 16:20:01.082:1532) : pid=689797 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 16:20:01.082:1533) : pid=689797 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=221 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 16:20:01.082:1533) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 16:20:01.082:1533) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=689797 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=221 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 16:20:01.103:1534) : pid=689797 uid=root auid=root ses=221 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 16:20:01.103:1535) : pid=689799 uid=root auid=root ses=221 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 16:20:01.106:1536) : pid=689797 uid=root auid=root ses=221 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 16:30:01.568:1537) : pid=696196 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 16:30:01.569:1538) : pid=696196 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 16:30:01.569:1539) : pid=696196 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=222 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 16:30:01.569:1539) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 16:30:01.569:1539) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=696196 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=222 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 16:30:01.592:1540) : pid=696196 uid=root auid=root ses=222 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 16:30:01.593:1541) : pid=696198 uid=root auid=root ses=222 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 16:30:01.595:1542) : pid=696196 uid=root auid=root ses=222 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 16:40:01.097:1543) : pid=702871 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 16:40:01.098:1544) : pid=702871 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 16:40:01.099:1545) : pid=702871 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=223 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 16:40:01.099:1545) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 16:40:01.099:1545) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=702871 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=223 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 16:40:01.115:1546) : pid=702871 uid=root auid=root ses=223 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 16:40:01.116:1547) : pid=702873 uid=root auid=root ses=223 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 16:40:01.118:1548) : pid=702871 uid=root auid=root ses=223 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 16:50:01.658:1549) : pid=709294 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 16:50:01.659:1550) : pid=709294 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 16:50:01.659:1551) : pid=709294 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=224 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 16:50:01.659:1551) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 16:50:01.659:1551) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=709294 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=224 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 16:50:01.677:1552) : pid=709294 uid=root auid=root ses=224 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 16:50:01.678:1553) : pid=709296 uid=root auid=root ses=224 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 16:50:01.680:1554) : pid=709294 uid=root auid=root ses=224 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:00:01.211:1555) : pid=715552 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:00:01.212:1556) : pid=715552 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:00:01.213:1557) : pid=715552 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=225 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:00:01.213:1557) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 17:00:01.213:1557) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=715552 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=225 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:00:01.237:1558) : pid=715552 uid=root auid=root ses=225 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:00:01.239:1559) : pid=715554 uid=root auid=root ses=225 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:00:01.240:1560) : pid=715552 uid=root auid=root ses=225 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:01:01.230:1561) : pid=716205 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:01:01.231:1562) : pid=716205 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:01:01.231:1563) : pid=716205 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=226 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:01:01.231:1563) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 17:01:01.231:1563) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=716205 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=226 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:01:01.246:1564) : pid=716205 uid=root auid=root ses=226 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:01:01.248:1565) : pid=716207 uid=root auid=root ses=226 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:01:01.251:1566) : pid=716205 uid=root auid=root ses=226 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:10:01.712:1567) : pid=722303 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:10:01.712:1568) : pid=722303 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:10:01.712:1569) : pid=722303 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=227 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:10:01.712:1569) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 17:10:01.712:1569) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=722303 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=227 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:10:01.733:1570) : pid=722303 uid=root auid=root ses=227 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:10:01.734:1571) : pid=722305 uid=root auid=root ses=227 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:10:01.736:1572) : pid=722303 uid=root auid=root ses=227 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:19:03.040:1573) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:19:03.042:1574) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:19:17.845:1575) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:19:17.847:1576) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:20:01.228:1577) : pid=727217 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:20:01.228:1578) : pid=727217 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:20:01.228:1579) : pid=727217 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=228 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:20:01.228:1579) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 17:20:01.228:1579) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffd6c0fcb10 a2=0x1 a3=0x7f4908bdf459 items=0 ppid=2851 pid=727217 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=228 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:20:01.247:1580) : pid=727217 uid=root auid=root ses=228 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:20:01.249:1581) : pid=727219 uid=root auid=root ses=228 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:20:01.251:1582) : pid=727217 uid=root auid=root ses=228 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:20:20.752:1583) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:20:20.753:1584) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:20:21.107:1585) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:20:21.623:1586) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:20:21.625:1587) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:20:21.733:1588) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:21:30.659:1589) : pid=728594 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:21:30.662:1590) : pid=728594 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:21:30.664:1591) : pid=728594 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:21:30.665:1592) : pid=728594 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=229 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:21:30.665:1592) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 17:21:30.665:1592) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffd8e2980c0 a2=0x3 a3=0x7f70f17e0459 items=0 ppid=2835 pid=728594 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=229 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:21:30.689:1593) : pid=728594 uid=root auid=datapk ses=229 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:21:30.691:1594) : pid=728606 uid=root auid=datapk ses=229 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:21:30.746:1595) : pid=728605 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:21:30.759:1596) : pid=728605 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:21:30.760:1597) : pid=728605 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:21:30.760:1598) : pid=728605 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=230 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:21:30.760:1598) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 17:21:30.760:1598) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffc217b80f0 a2=0x3 a3=0x7f1faa446459 items=0 ppid=2835 pid=728605 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=230 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:21:30.777:1599) : pid=728605 uid=root auid=datapk ses=230 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:21:30.777:1600) : pid=728611 uid=root auid=datapk ses=230 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=USER_LOGIN msg=audit(12.03.2026 17:21:32.866:1601) : pid=728594 uid=root auid=datapk ses=229 msg='op=login id=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=/dev/pts/1 res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:21:39.642:1602) : pid=728686 uid=datapk auid=datapk ses=229 msg='op=PAM:authentication grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:21:39.643:1603) : pid=728686 uid=datapk auid=datapk ses=229 msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=USER_START msg=audit(12.03.2026 17:21:39.643:1604) : pid=728686 uid=datapk auid=datapk ses=229 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:21:39.643:1605) : pid=728686 uid=datapk auid=datapk ses=229 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=BPF msg=audit(12.03.2026 17:22:02.843:1606) : prog-id=9 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.844:1607) : prog-id=13 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.844:1608) : prog-id=25 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.853:1609) : prog-id=6 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.855:1610) : prog-id=18 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.856:1611) : prog-id=12 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.856:1612) : prog-id=17 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.858:1613) : prog-id=21 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.859:1614) : prog-id=16 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.859:1615) : prog-id=20 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.860:1616) : prog-id=28 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.861:1617) : prog-id=24 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.861:1618) : prog-id=3 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.862:1619) : prog-id=22 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.863:1620) : prog-id=19 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.978:1621) : prog-id=29 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.978:1622) : prog-id=30 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.978:1623) : prog-id=31 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.978:1624) : prog-id=10 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.978:1625) : prog-id=11 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.979:1626) : prog-id=32 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.979:1627) : prog-id=33 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.979:1628) : prog-id=34 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.979:1629) : prog-id=14 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.979:1630) : prog-id=15 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.980:1631) : prog-id=35 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.982:1632) : prog-id=36 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.982:1633) : prog-id=37 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.982:1634) : prog-id=38 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.982:1635) : prog-id=7 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.982:1636) : prog-id=8 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.983:1637) : prog-id=39 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.983:1638) : prog-id=40 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.984:1639) : prog-id=41 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.985:1640) : prog-id=42 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.985:1641) : prog-id=43 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.985:1642) : prog-id=44 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.986:1643) : prog-id=45 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.986:1644) : prog-id=46 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.987:1645) : prog-id=47 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.987:1646) : prog-id=48 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.987:1647) : prog-id=49 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.987:1648) : prog-id=4 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.987:1649) : prog-id=5 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.988:1650) : prog-id=50 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:22:02.989:1651) : prog-id=51 op=LOAD 
----
type=USER_AUTH msg=audit(12.03.2026 17:23:49.613:1652) : pid=730940 uid=root auid=datapk ses=229 msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:23:49.613:1653) : pid=730940 uid=root auid=datapk ses=229 msg='op=PAM:accounting grantors=pam_permit acct=root exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:23:49.616:1654) : pid=730940 uid=root auid=datapk ses=229 msg='op=adding group to /etc/group id=opensearch exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:23:49.617:1655) : pid=730940 uid=root auid=datapk ses=229 msg='op=adding group to /etc/gshadow id=opensearch exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:23:49.619:1656) : pid=730940 uid=root auid=datapk ses=229 msg='op= id=opensearch exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:23:49.622:1657) : pid=730945 uid=root auid=datapk ses=229 msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:23:49.622:1658) : pid=730945 uid=root auid=datapk ses=229 msg='op=PAM:accounting grantors=pam_permit acct=root exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_USER msg=audit(12.03.2026 17:23:49.624:1659) : pid=730945 uid=root auid=datapk ses=229 msg='op=adding user id=unknown(475) exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=BPF msg=audit(12.03.2026 17:23:49.649:1660) : prog-id=36 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.650:1661) : prog-id=45 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.651:1662) : prog-id=40 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.652:1663) : prog-id=46 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.653:1664) : prog-id=32 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.653:1665) : prog-id=42 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.654:1666) : prog-id=41 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.654:1667) : prog-id=51 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.655:1668) : prog-id=29 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.655:1669) : prog-id=39 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.657:1670) : prog-id=44 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.663:1671) : prog-id=43 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.663:1672) : prog-id=50 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.663:1673) : prog-id=47 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.664:1674) : prog-id=35 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.752:1675) : prog-id=52 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.754:1676) : prog-id=53 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.754:1677) : prog-id=54 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.754:1678) : prog-id=55 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.754:1679) : prog-id=56 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.754:1680) : prog-id=33 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.754:1681) : prog-id=34 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.756:1682) : prog-id=57 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.756:1683) : prog-id=58 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.756:1684) : prog-id=59 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.756:1685) : prog-id=60 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1686) : prog-id=61 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1687) : prog-id=62 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1688) : prog-id=30 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1689) : prog-id=31 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1690) : prog-id=63 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1691) : prog-id=64 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1692) : prog-id=65 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1693) : prog-id=66 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1694) : prog-id=37 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.757:1695) : prog-id=38 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.758:1696) : prog-id=67 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.759:1697) : prog-id=68 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.760:1698) : prog-id=69 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.760:1699) : prog-id=70 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.761:1700) : prog-id=71 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.761:1701) : prog-id=72 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.761:1702) : prog-id=73 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.761:1703) : prog-id=48 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.761:1704) : prog-id=49 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.761:1705) : prog-id=74 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.774:1706) : prog-id=64 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.774:1707) : prog-id=52 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.775:1708) : prog-id=68 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.775:1709) : prog-id=53 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.776:1710) : prog-id=54 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.777:1711) : prog-id=57 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.777:1712) : prog-id=58 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.778:1713) : prog-id=59 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.778:1714) : prog-id=60 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.779:1715) : prog-id=63 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.780:1716) : prog-id=67 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.789:1717) : prog-id=69 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.789:1718) : prog-id=70 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.790:1719) : prog-id=71 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.790:1720) : prog-id=74 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.910:1721) : prog-id=75 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.910:1722) : prog-id=76 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1723) : prog-id=77 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1724) : prog-id=78 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1725) : prog-id=79 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1726) : prog-id=55 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1727) : prog-id=56 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1728) : prog-id=80 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1729) : prog-id=81 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1730) : prog-id=82 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1731) : prog-id=83 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1732) : prog-id=84 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1733) : prog-id=85 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1734) : prog-id=61 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.912:1735) : prog-id=62 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.914:1736) : prog-id=86 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.914:1737) : prog-id=87 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.914:1738) : prog-id=88 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.914:1739) : prog-id=89 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.914:1740) : prog-id=65 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.914:1741) : prog-id=66 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.915:1742) : prog-id=90 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.916:1743) : prog-id=91 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.916:1744) : prog-id=92 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.916:1745) : prog-id=93 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.916:1746) : prog-id=94 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.918:1747) : prog-id=95 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.918:1748) : prog-id=96 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.918:1749) : prog-id=72 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.918:1750) : prog-id=73 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.918:1751) : prog-id=97 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.966:1752) : prog-id=87 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.966:1753) : prog-id=75 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.968:1754) : prog-id=91 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.968:1755) : prog-id=76 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.970:1756) : prog-id=77 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.970:1757) : prog-id=80 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.971:1758) : prog-id=81 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.972:1759) : prog-id=82 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.972:1760) : prog-id=83 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.973:1761) : prog-id=86 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.975:1762) : prog-id=90 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.982:1763) : prog-id=92 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.982:1764) : prog-id=93 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.985:1765) : prog-id=94 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:49.985:1766) : prog-id=97 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.118:1767) : prog-id=98 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.120:1768) : prog-id=99 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.122:1769) : prog-id=100 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.122:1770) : prog-id=101 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.122:1771) : prog-id=102 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.122:1772) : prog-id=78 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.122:1773) : prog-id=79 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.122:1774) : prog-id=103 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.123:1775) : prog-id=104 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.124:1776) : prog-id=105 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.124:1777) : prog-id=106 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1778) : prog-id=107 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1779) : prog-id=108 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1780) : prog-id=84 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1781) : prog-id=85 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1782) : prog-id=109 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1783) : prog-id=110 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1784) : prog-id=111 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1785) : prog-id=112 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1786) : prog-id=88 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.125:1787) : prog-id=89 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.127:1788) : prog-id=113 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.129:1789) : prog-id=114 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.130:1790) : prog-id=115 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.130:1791) : prog-id=116 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.130:1792) : prog-id=117 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.130:1793) : prog-id=118 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.130:1794) : prog-id=119 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.130:1795) : prog-id=95 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.130:1796) : prog-id=96 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.132:1797) : prog-id=120 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.147:1798) : prog-id=110 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.148:1799) : prog-id=98 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.150:1800) : prog-id=114 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.150:1801) : prog-id=99 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.152:1802) : prog-id=100 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.153:1803) : prog-id=103 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.153:1804) : prog-id=104 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.154:1805) : prog-id=105 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.154:1806) : prog-id=106 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.155:1807) : prog-id=109 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.157:1808) : prog-id=113 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.161:1809) : prog-id=115 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.161:1810) : prog-id=116 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.162:1811) : prog-id=117 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.163:1812) : prog-id=120 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.296:1813) : prog-id=121 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.297:1814) : prog-id=122 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.299:1815) : prog-id=123 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.299:1816) : prog-id=124 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.299:1817) : prog-id=125 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.299:1818) : prog-id=101 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.299:1819) : prog-id=102 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.302:1820) : prog-id=126 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.302:1821) : prog-id=127 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1822) : prog-id=128 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1823) : prog-id=129 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1824) : prog-id=130 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1825) : prog-id=131 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1826) : prog-id=107 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1827) : prog-id=108 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1828) : prog-id=132 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1829) : prog-id=133 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1830) : prog-id=134 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1831) : prog-id=135 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1832) : prog-id=111 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.303:1833) : prog-id=112 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.305:1834) : prog-id=136 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.306:1835) : prog-id=137 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.306:1836) : prog-id=138 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.308:1837) : prog-id=139 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.309:1838) : prog-id=140 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.309:1839) : prog-id=141 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.309:1840) : prog-id=142 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.309:1841) : prog-id=118 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.309:1842) : prog-id=119 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:50.309:1843) : prog-id=143 op=LOAD 
----
type=USER_AUTH msg=audit(12.03.2026 17:23:56.360:1844) : pid=731090 uid=root auid=datapk ses=229 msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:23:56.360:1845) : pid=731090 uid=root auid=datapk ses=229 msg='op=PAM:accounting grantors=pam_permit acct=root exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:23:56.363:1846) : pid=731090 uid=root auid=datapk ses=229 msg='op=adding group to /etc/group id=opensearch-dashboards exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:23:56.365:1847) : pid=731090 uid=root auid=datapk ses=229 msg='op=adding group to /etc/gshadow id=opensearch-dashboards exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:23:56.367:1848) : pid=731090 uid=root auid=datapk ses=229 msg='op= id=opensearch-dashboards exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:23:56.370:1849) : pid=731095 uid=root auid=datapk ses=229 msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:23:56.370:1850) : pid=731095 uid=root auid=datapk ses=229 msg='op=PAM:accounting grantors=pam_permit acct=root exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_USER msg=audit(12.03.2026 17:23:56.372:1851) : pid=731095 uid=root auid=datapk ses=229 msg='op=adding user id=unknown(474) exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=BPF msg=audit(12.03.2026 17:23:56.398:1852) : prog-id=133 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.398:1853) : prog-id=121 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.401:1854) : prog-id=137 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.402:1855) : prog-id=122 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.403:1856) : prog-id=123 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.403:1857) : prog-id=126 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.403:1858) : prog-id=127 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.404:1859) : prog-id=128 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.404:1860) : prog-id=129 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.405:1861) : prog-id=132 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.407:1862) : prog-id=136 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.414:1863) : prog-id=138 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.416:1864) : prog-id=139 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.417:1865) : prog-id=140 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.418:1866) : prog-id=143 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.524:1867) : prog-id=144 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.525:1868) : prog-id=145 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.526:1869) : prog-id=146 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.526:1870) : prog-id=147 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.526:1871) : prog-id=148 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.526:1872) : prog-id=124 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.526:1873) : prog-id=125 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.526:1874) : prog-id=149 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.526:1875) : prog-id=150 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.527:1876) : prog-id=151 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.527:1877) : prog-id=152 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.527:1878) : prog-id=153 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.527:1879) : prog-id=154 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.527:1880) : prog-id=130 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.527:1881) : prog-id=131 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.528:1882) : prog-id=155 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.528:1883) : prog-id=156 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.528:1884) : prog-id=157 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.528:1885) : prog-id=158 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.528:1886) : prog-id=134 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.528:1887) : prog-id=135 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.529:1888) : prog-id=159 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.530:1889) : prog-id=160 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.531:1890) : prog-id=161 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.531:1891) : prog-id=162 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.532:1892) : prog-id=163 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.532:1893) : prog-id=164 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.532:1894) : prog-id=165 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.532:1895) : prog-id=141 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.532:1896) : prog-id=142 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.532:1897) : prog-id=166 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.546:1898) : prog-id=156 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.546:1899) : prog-id=144 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.551:1900) : prog-id=160 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.551:1901) : prog-id=145 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.553:1902) : prog-id=146 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.554:1903) : prog-id=149 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.554:1904) : prog-id=150 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.556:1905) : prog-id=151 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.556:1906) : prog-id=152 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.558:1907) : prog-id=155 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.562:1908) : prog-id=159 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.571:1909) : prog-id=161 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.571:1910) : prog-id=162 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.572:1911) : prog-id=163 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.572:1912) : prog-id=166 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.675:1913) : prog-id=167 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.675:1914) : prog-id=168 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.676:1915) : prog-id=169 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.676:1916) : prog-id=170 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.676:1917) : prog-id=171 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.676:1918) : prog-id=147 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.676:1919) : prog-id=148 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.677:1920) : prog-id=172 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.677:1921) : prog-id=173 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.678:1922) : prog-id=174 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.678:1923) : prog-id=175 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.678:1924) : prog-id=176 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.678:1925) : prog-id=177 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.678:1926) : prog-id=153 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.678:1927) : prog-id=154 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.679:1928) : prog-id=178 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.679:1929) : prog-id=179 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.679:1930) : prog-id=180 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.679:1931) : prog-id=181 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.679:1932) : prog-id=157 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.679:1933) : prog-id=158 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.680:1934) : prog-id=182 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.681:1935) : prog-id=183 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.682:1936) : prog-id=184 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.682:1937) : prog-id=185 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.683:1938) : prog-id=186 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.683:1939) : prog-id=187 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.683:1940) : prog-id=188 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.683:1941) : prog-id=164 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.683:1942) : prog-id=165 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:23:56.683:1943) : prog-id=189 op=LOAD 
----
type=USER_AUTH msg=audit(12.03.2026 17:24:16.609:1944) : pid=731757 uid=root auid=datapk ses=229 msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:24:16.609:1945) : pid=731757 uid=root auid=datapk ses=229 msg='op=PAM:accounting grantors=pam_permit acct=root exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:24:16.612:1946) : pid=731757 uid=root auid=datapk ses=229 msg='op=adding group to /etc/group id=logstash exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:24:16.614:1947) : pid=731757 uid=root auid=datapk ses=229 msg='op=adding group to /etc/gshadow id=logstash exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_GROUP msg=audit(12.03.2026 17:24:16.616:1948) : pid=731757 uid=root auid=datapk ses=229 msg='op= id=logstash exe=/usr/sbin/groupadd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:24:16.620:1949) : pid=731762 uid=root auid=datapk ses=229 msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:24:16.621:1950) : pid=731762 uid=root auid=datapk ses=229 msg='op=PAM:accounting grantors=pam_permit acct=root exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=ADD_USER msg=audit(12.03.2026 17:24:16.622:1951) : pid=731762 uid=root auid=datapk ses=229 msg='op=adding user id=unknown(473) exe=/usr/sbin/useradd hostname=datapk addr=? terminal=pts/1 res=success' 
----
type=BPF msg=audit(12.03.2026 17:24:16.650:1952) : prog-id=179 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.651:1953) : prog-id=167 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.653:1954) : prog-id=183 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.653:1955) : prog-id=168 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.655:1956) : prog-id=169 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.655:1957) : prog-id=172 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.656:1958) : prog-id=173 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.656:1959) : prog-id=174 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.657:1960) : prog-id=175 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.658:1961) : prog-id=178 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.659:1962) : prog-id=182 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.671:1963) : prog-id=184 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.671:1964) : prog-id=185 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.672:1965) : prog-id=186 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.673:1966) : prog-id=189 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.782:1967) : prog-id=190 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.783:1968) : prog-id=191 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.784:1969) : prog-id=192 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.785:1970) : prog-id=193 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.785:1971) : prog-id=194 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.785:1972) : prog-id=170 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.785:1973) : prog-id=171 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.785:1974) : prog-id=195 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.785:1975) : prog-id=196 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.785:1976) : prog-id=197 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.786:1977) : prog-id=198 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.786:1978) : prog-id=199 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.787:1979) : prog-id=200 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.787:1980) : prog-id=176 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.787:1981) : prog-id=177 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.787:1982) : prog-id=201 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.788:1983) : prog-id=202 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.788:1984) : prog-id=203 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.788:1985) : prog-id=204 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.788:1986) : prog-id=180 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.788:1987) : prog-id=181 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.789:1988) : prog-id=205 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.790:1989) : prog-id=206 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.791:1990) : prog-id=207 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.792:1991) : prog-id=208 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.793:1992) : prog-id=209 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.793:1993) : prog-id=210 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.793:1994) : prog-id=211 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.793:1995) : prog-id=187 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.793:1996) : prog-id=188 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.794:1997) : prog-id=212 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.809:1998) : prog-id=202 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.809:1999) : prog-id=190 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.811:2000) : prog-id=206 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.812:2001) : prog-id=191 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.814:2002) : prog-id=192 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.815:2003) : prog-id=195 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.815:2004) : prog-id=196 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.815:2005) : prog-id=197 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.816:2006) : prog-id=198 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.817:2007) : prog-id=201 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.818:2008) : prog-id=205 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.827:2009) : prog-id=207 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.827:2010) : prog-id=208 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.830:2011) : prog-id=209 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.830:2012) : prog-id=212 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.914:2013) : prog-id=213 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.915:2014) : prog-id=214 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.916:2015) : prog-id=215 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.916:2016) : prog-id=216 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.916:2017) : prog-id=217 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.916:2018) : prog-id=193 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.916:2019) : prog-id=194 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.916:2020) : prog-id=218 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.917:2021) : prog-id=219 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.918:2022) : prog-id=220 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.919:2023) : prog-id=221 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.919:2024) : prog-id=222 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.919:2025) : prog-id=223 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.919:2026) : prog-id=199 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.919:2027) : prog-id=200 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.920:2028) : prog-id=224 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.921:2029) : prog-id=225 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.921:2030) : prog-id=226 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.921:2031) : prog-id=227 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.921:2032) : prog-id=203 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.921:2033) : prog-id=204 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.921:2034) : prog-id=228 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.922:2035) : prog-id=229 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.923:2036) : prog-id=230 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.924:2037) : prog-id=231 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.925:2038) : prog-id=232 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.925:2039) : prog-id=233 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.925:2040) : prog-id=234 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.925:2041) : prog-id=210 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.925:2042) : prog-id=211 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:16.925:2043) : prog-id=235 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.318:2044) : prog-id=225 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.318:2045) : prog-id=213 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.320:2046) : prog-id=229 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.320:2047) : prog-id=214 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.322:2048) : prog-id=215 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.322:2049) : prog-id=218 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.322:2050) : prog-id=219 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.323:2051) : prog-id=220 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.323:2052) : prog-id=221 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.324:2053) : prog-id=224 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.325:2054) : prog-id=228 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.334:2055) : prog-id=230 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.335:2056) : prog-id=231 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.337:2057) : prog-id=232 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.338:2058) : prog-id=235 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.421:2059) : prog-id=236 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.422:2060) : prog-id=237 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.423:2061) : prog-id=238 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.423:2062) : prog-id=239 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.423:2063) : prog-id=240 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.423:2064) : prog-id=216 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.423:2065) : prog-id=217 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.424:2066) : prog-id=241 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.424:2067) : prog-id=242 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.424:2068) : prog-id=243 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.424:2069) : prog-id=244 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2070) : prog-id=245 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2071) : prog-id=246 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2072) : prog-id=222 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2073) : prog-id=223 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2074) : prog-id=247 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2075) : prog-id=248 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2076) : prog-id=249 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2077) : prog-id=250 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2078) : prog-id=226 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.425:2079) : prog-id=227 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.426:2080) : prog-id=251 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.427:2081) : prog-id=252 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.427:2082) : prog-id=253 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.428:2083) : prog-id=254 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.429:2084) : prog-id=255 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.429:2085) : prog-id=256 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.429:2086) : prog-id=257 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.429:2087) : prog-id=233 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.429:2088) : prog-id=234 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.429:2089) : prog-id=258 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.442:2090) : prog-id=248 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.442:2091) : prog-id=236 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.444:2092) : prog-id=252 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.444:2093) : prog-id=237 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.445:2094) : prog-id=238 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.446:2095) : prog-id=241 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.446:2096) : prog-id=242 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.446:2097) : prog-id=243 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.447:2098) : prog-id=244 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.447:2099) : prog-id=247 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.448:2100) : prog-id=251 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.455:2101) : prog-id=253 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.455:2102) : prog-id=254 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.456:2103) : prog-id=255 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.456:2104) : prog-id=258 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.546:2105) : prog-id=259 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.547:2106) : prog-id=260 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.548:2107) : prog-id=261 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.549:2108) : prog-id=262 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.549:2109) : prog-id=263 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.549:2110) : prog-id=239 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.549:2111) : prog-id=240 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.549:2112) : prog-id=264 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.549:2113) : prog-id=265 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.549:2114) : prog-id=266 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.550:2115) : prog-id=267 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.550:2116) : prog-id=268 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.550:2117) : prog-id=269 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.550:2118) : prog-id=245 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.550:2119) : prog-id=246 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.550:2120) : prog-id=270 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.550:2121) : prog-id=271 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.551:2122) : prog-id=272 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.551:2123) : prog-id=273 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.551:2124) : prog-id=249 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.551:2125) : prog-id=250 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.551:2126) : prog-id=274 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.552:2127) : prog-id=275 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.553:2128) : prog-id=276 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.553:2129) : prog-id=277 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.554:2130) : prog-id=278 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.554:2131) : prog-id=279 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.554:2132) : prog-id=280 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.554:2133) : prog-id=256 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.554:2134) : prog-id=257 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:24.555:2135) : prog-id=281 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.830:2136) : prog-id=271 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.830:2137) : prog-id=259 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.833:2138) : prog-id=275 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.834:2139) : prog-id=260 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.835:2140) : prog-id=261 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.837:2141) : prog-id=264 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.838:2142) : prog-id=265 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.839:2143) : prog-id=266 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.839:2144) : prog-id=267 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.840:2145) : prog-id=270 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.841:2146) : prog-id=274 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.850:2147) : prog-id=276 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.851:2148) : prog-id=277 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.852:2149) : prog-id=278 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.852:2150) : prog-id=281 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.946:2151) : prog-id=282 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.947:2152) : prog-id=283 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.948:2153) : prog-id=284 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.948:2154) : prog-id=285 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.948:2155) : prog-id=286 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.948:2156) : prog-id=262 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.948:2157) : prog-id=263 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.948:2158) : prog-id=287 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.949:2159) : prog-id=288 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.950:2160) : prog-id=289 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.951:2161) : prog-id=290 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.951:2162) : prog-id=291 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.951:2163) : prog-id=292 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.951:2164) : prog-id=268 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.951:2165) : prog-id=269 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.951:2166) : prog-id=293 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.951:2167) : prog-id=294 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.952:2168) : prog-id=295 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.952:2169) : prog-id=296 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.952:2170) : prog-id=272 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.952:2171) : prog-id=273 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.952:2172) : prog-id=297 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.953:2173) : prog-id=298 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.954:2174) : prog-id=299 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.955:2175) : prog-id=300 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.956:2176) : prog-id=301 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.956:2177) : prog-id=302 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.956:2178) : prog-id=303 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.956:2179) : prog-id=279 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.956:2180) : prog-id=280 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.956:2181) : prog-id=304 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.992:2182) : prog-id=294 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.993:2183) : prog-id=282 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.995:2184) : prog-id=298 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.995:2185) : prog-id=283 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.996:2186) : prog-id=284 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.997:2187) : prog-id=287 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.997:2188) : prog-id=288 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.998:2189) : prog-id=289 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.999:2190) : prog-id=290 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:26.999:2191) : prog-id=293 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.001:2192) : prog-id=297 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.010:2193) : prog-id=299 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.012:2194) : prog-id=300 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.017:2195) : prog-id=301 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.018:2196) : prog-id=304 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.121:2197) : prog-id=305 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.122:2198) : prog-id=306 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.123:2199) : prog-id=307 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.123:2200) : prog-id=308 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.123:2201) : prog-id=309 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.123:2202) : prog-id=285 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.123:2203) : prog-id=286 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.123:2204) : prog-id=310 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.124:2205) : prog-id=311 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.124:2206) : prog-id=312 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.124:2207) : prog-id=313 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2208) : prog-id=314 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2209) : prog-id=315 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2210) : prog-id=291 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2211) : prog-id=292 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2212) : prog-id=316 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2213) : prog-id=317 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2214) : prog-id=318 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2215) : prog-id=319 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2216) : prog-id=295 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.125:2217) : prog-id=296 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.126:2218) : prog-id=320 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.127:2219) : prog-id=321 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.128:2220) : prog-id=322 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.128:2221) : prog-id=323 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.129:2222) : prog-id=324 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.129:2223) : prog-id=325 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.129:2224) : prog-id=326 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.129:2225) : prog-id=302 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.129:2226) : prog-id=303 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:24:27.130:2227) : prog-id=327 op=LOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:25:55.081:2228) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:25:55.082:2229) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:08.066:2230) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:26:08.069:2231) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:13.269:2232) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:26:13.272:2233) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:13.606:2234) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:15.783:2235) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:26:15.786:2236) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:26:15.889:2237) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:40.067:2238) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:26:40.075:2239) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:41.132:2240) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:26:41.266:2241) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:43.214:2242) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:26:43.216:2243) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:26:55.997:2244) : pid=735755 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:26:56.009:2245) : pid=735755 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:26:56.011:2246) : pid=735755 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:26:56.012:2247) : pid=735755 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=231 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:26:56.012:2247) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 17:26:56.012:2247) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7fffc0b6e220 a2=0x3 a3=0x7f32374aa459 items=0 ppid=2835 pid=735755 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=231 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:26:56.033:2248) : pid=735755 uid=root auid=datapk ses=231 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:26:56.035:2249) : pid=735761 uid=root auid=datapk ses=231 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 17:26:58.539:2250) : pid=44349 uid=root auid=datapk ses=15 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:26:58.539:2251) : pid=44349 uid=root auid=datapk ses=15 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 17:26:58.540:2252) : pid=44398 uid=root auid=datapk ses=16 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:26:58.540:2253) : pid=44398 uid=root auid=datapk ses=16 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 17:26:58.540:2254) : pid=453801 uid=root auid=datapk ses=170 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:26:58.540:2255) : pid=453801 uid=root auid=datapk ses=170 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:26:58.542:2256) : pid=168155 uid=datapk auid=datapk ses=15 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/2 res=success' 
----
type=USER_END msg=audit(12.03.2026 17:26:58.542:2257) : pid=168155 uid=datapk auid=datapk ses=15 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/2 res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:26:58.551:2258) : pid=728686 uid=datapk auid=datapk ses=229 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=USER_END msg=audit(12.03.2026 17:26:58.551:2259) : pid=728686 uid=datapk auid=datapk ses=229 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:26:58.556:2260) : pid=453915 uid=datapk auid=datapk ses=170 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_END msg=audit(12.03.2026 17:26:58.556:2261) : pid=453915 uid=datapk auid=datapk ses=170 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.046:2262) : pid=1 uid=root auid=unset ses=unset msg='unit=vconsole-setup-kludge@tty1 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:26:59.073:2263) : pid=2858 uid=root auid=root ses=1 msg='op=PAM:setcred grantors=pam_securetty,pam_tcb acct=root exe=/bin/login hostname=datapk addr=? terminal=/dev/tty1 res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.167:2264) : pid=1 uid=root auid=unset ses=unset msg='unit=daemontools comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.180:2265) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:26:59.204:2266) : prog-id=321 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.206:2267) : pid=1 uid=root auid=unset ses=unset msg='unit=chronyd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.230:2268) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.264:2269) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.282:2270) : pid=1 uid=root auid=unset ses=unset msg='unit=vmtoolsd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.303:2271) : pid=1 uid=root auid=unset ses=unset msg='unit=nslcd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.321:2272) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.322:2273) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.352:2274) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.353:2275) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.415:2276) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.443:2277) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.465:2278) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.517:2279) : pid=1 uid=root auid=unset ses=unset msg='unit=sshd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.518:2280) : pid=1 uid=root auid=unset ses=unset msg='unit=crond comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.584:2281) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.636:2282) : pid=1 uid=root auid=unset ses=unset msg='unit=polkit comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.645:2283) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.665:2284) : pid=1 uid=root auid=unset ses=unset msg='unit=epmd@0.0.0.0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.698:2285) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.728:2286) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.749:2287) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.800:2288) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.825:2289) : pid=1 uid=root auid=unset ses=unset msg='unit=postfix comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.868:2290) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.871:2291) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-random-seed comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:26:59.986:2292) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.009:2293) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.010:2294) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.010:2295) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.039:2296) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.066:2297) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:27:00.094:2298) : prog-id=311 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:27:00.094:2299) : prog-id=312 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:27:00.094:2300) : prog-id=306 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:27:00.094:2301) : prog-id=322 op=UNLOAD 
----
type=BPF msg=audit(12.03.2026 17:27:00.094:2302) : prog-id=316 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.124:2303) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.206:2304) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.234:2305) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.278:2306) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.279:2307) : pid=1 uid=root auid=unset ses=unset msg='unit=vgauthd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.287:2308) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.371:2309) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:27:00.382:2310) : pid=498781 uid=root auid=datapk ses=183 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:27:00.382:2311) : pid=498781 uid=root auid=datapk ses=183 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 17:27:00.385:2312) : pid=453818 uid=root auid=datapk ses=171 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:27:00.385:2313) : pid=453818 uid=root auid=datapk ses=171 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 17:27:00.388:2314) : pid=728594 uid=root auid=datapk ses=229 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:27:00.388:2315) : pid=728594 uid=root auid=datapk ses=229 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 17:27:00.389:2316) : pid=728605 uid=root auid=datapk ses=230 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:27:00.389:2317) : pid=728605 uid=root auid=datapk ses=230 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=192.168.242.1 addr=192.168.242.1 terminal=ssh res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.467:2318) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.496:2319) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.511:2320) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:27:00.624:2321) : pid=735755 uid=root auid=datapk ses=231 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:27:00.624:2322) : pid=735755 uid=root auid=datapk ses=231 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(12.03.2026 17:27:00.625:2323) : pid=2858 uid=root auid=root ses=1 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_lastlog,pam_mail acct=root exe=/bin/login hostname=datapk addr=? terminal=/dev/tty1 res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.667:2324) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.707:2325) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.730:2326) : pid=1 uid=root auid=unset ses=unset msg='unit=user@500 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.857:2327) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@500 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.863:2328) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.876:2329) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:00.925:2330) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.173:2331) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.199:2332) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.200:2333) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.239:2334) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.276:2335) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.330:2336) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.473:2337) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.612:2338) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.654:2339) : pid=1 uid=root auid=unset ses=unset msg='unit=getty@tty1 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.659:2340) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.677:2341) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:27:01.690:2342) : prog-id=327 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.793:2343) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.794:2344) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.819:2345) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:27:01.848:2346) : pid=4261 uid=root auid=root ses=2 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.870:2347) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.871:2348) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.873:2349) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.874:2350) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.875:2351) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.911:2352) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.924:2353) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.941:2354) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-logind comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.952:2355) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.953:2356) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:27:01.961:2357) : prog-id=307 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.985:2358) : pid=1 uid=root auid=unset ses=unset msg='unit=dbus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:01.996:2359) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-user-sessions comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:02.014:2360) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:02.037:2361) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:02.085:2362) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:02.270:2363) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=ANOM_PROMISCUOUS msg=audit(12.03.2026 17:27:02.675:2364) : dev=ens34 prom=no old_prom=yes auid=unset uid=root gid=root ses=unset 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:02.714:2365) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:02.778:2366) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:03.492:2367) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:03.696:2368) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:04.329:2369) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:05.027:2370) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:29.075:2371) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:27:29.085:2372) : prog-id=305 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:29.086:2373) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:29.309:2374) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:29.485:2375) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:29.775:2376) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:31.068:2377) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:34.007:2378) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:58.800:2379) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:58.862:2380) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:59.173:2381) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-mariadb comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:27:59.180:2382) : prog-id=310 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:59.197:2383) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:59.324:2384) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-postgresql comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:27:59.423:2385) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:27:59.427:2386) : prog-id=320 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:01.277:2387) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:01.285:2388) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:28.717:2389) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:28.898:2390) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:28.901:2391) : prog-id=323 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:28.904:2392) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:30.299:2393) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:30.306:2394) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:31.509:2395) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:31.521:2396) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-sysctl comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:31.522:2397) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-modules-load comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SYSTEM_SHUTDOWN msg=audit(12.03.2026 17:28:31.537:2398) : pid=736998 uid=root auid=unset ses=unset msg=' comm=systemd-update-utmp exe=/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:28:31.541:2399) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-update-utmp comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=DAEMON_END msg=audit(12.03.2026 17:28:31.543:7731) : op=terminate auid=root uid=root ses=unset pid=1 res=success 
----
type=DAEMON_START msg=audit(12.03.2026 17:28:50.239:4282) : op=start ver=3.1.2 format=enriched kernel=6.12.73-6.12-alt0.c10f.2 auid=unset pid=2414 uid=root ses=unset res=success 
----
type=PROCTITLE msg=audit(12.03.2026 17:28:50.259:3) : proctitle=/sbin/auditctl -R /etc/audit/audit.rules 
type=SYSCALL msg=audit(12.03.2026 17:28:50.259:3) : arch=x86_64 syscall=sendto success=yes exit=60 a0=0x3 a1=0x7fff3dc00530 a2=0x3c a3=0x0 items=0 ppid=2417 pid=2428 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=auditctl exe=/sbin/auditctl key=(null) 
type=CONFIG_CHANGE msg=audit(12.03.2026 17:28:50.259:3) : op=set audit_backlog_limit=8192 old=64 auid=unset ses=unset res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:28:50.260:4) : proctitle=/sbin/auditctl -R /etc/audit/audit.rules 
type=SYSCALL msg=audit(12.03.2026 17:28:50.260:4) : arch=x86_64 syscall=sendto success=yes exit=60 a0=0x3 a1=0x7fff3dc00530 a2=0x3c a3=0x0 items=0 ppid=2417 pid=2428 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=auditctl exe=/sbin/auditctl key=(null) 
type=CONFIG_CHANGE msg=audit(12.03.2026 17:28:50.260:4) : op=set audit_failure=1 old=1 auid=unset ses=unset res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:28:50.261:5) : proctitle=/sbin/auditctl -R /etc/audit/audit.rules 
type=SYSCALL msg=audit(12.03.2026 17:28:50.261:5) : arch=x86_64 syscall=sendto success=yes exit=60 a0=0x3 a1=0x7fff3dc00530 a2=0x3c a3=0x0 items=0 ppid=2417 pid=2428 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=auditctl exe=/sbin/auditctl key=(null) 
type=CONFIG_CHANGE msg=audit(12.03.2026 17:28:50.261:5) : op=set audit_backlog_wait_time=60000 old=60000 auid=unset ses=unset res=yes 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:50.267:6) : pid=1 uid=root auid=unset ses=unset msg='unit=auditd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SYSTEM_BOOT msg=audit(12.03.2026 17:28:50.274:7) : pid=2435 uid=root auid=unset ses=unset msg=' comm=systemd-update-utmp exe=/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:50.278:8) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-update-utmp comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:51.028:9) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-udev-settle comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:52.835:10) : pid=1 uid=root auid=unset ses=unset msg='unit=integalert comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=BPF msg=audit(12.03.2026 17:28:52.856:11) : prog-id=12 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:52.860:12) : pid=1 uid=root auid=unset ses=unset msg='unit=daemontools comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:52.868:13) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:52.870:14) : prog-id=13 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:28:52.870:15) : prog-id=14 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:28:52.870:16) : prog-id=15 op=LOAD 
----
type=BPF msg=audit(12.03.2026 17:28:52.873:17) : prog-id=16 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:52.879:18) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:52.924:19) : prog-id=17 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:52.929:20) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:52.930:21) : prog-id=18 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:52.930:22) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:52.952:23) : prog-id=19 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:52.970:24) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:52.982:25) : prog-id=20 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.039:26) : pid=1 uid=root auid=unset ses=unset msg='unit=vgauthd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.051:27) : pid=1 uid=root auid=unset ses=unset msg='unit=vmtoolsd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.060:28) : pid=1 uid=root auid=unset ses=unset msg='unit=dbus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.073:29) : pid=1 uid=root auid=unset ses=unset msg='unit=chronyd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.077:30) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-logind comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.309:31) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:53.428:32) : prog-id=21 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.633:33) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.675:34) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.706:35) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.789:36) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-postgresql comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.831:37) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-user-sessions comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.843:38) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.861:39) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.862:40) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.863:41) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.863:42) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.863:43) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.880:44) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.881:45) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.902:46) : pid=1 uid=root auid=unset ses=unset msg='unit=sshd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.942:47) : pid=1 uid=root auid=unset ses=unset msg='unit=nslcd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.968:48) : pid=1 uid=root auid=unset ses=unset msg='unit=crond comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:53.990:49) : pid=1 uid=root auid=unset ses=unset msg='unit=getty@tty1 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.191:50) : pid=1 uid=root auid=unset ses=unset msg='unit=vconsole-setup-kludge@tty1 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.366:51) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.413:52) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.414:53) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:54.462:54) : prog-id=22 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.488:55) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.488:56) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:54.507:57) : prog-id=23 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.682:58) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.723:59) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.923:60) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:54.966:61) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.083:62) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.102:63) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.125:64) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.157:65) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.171:66) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.425:67) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.502:68) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.524:69) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.559:70) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.607:71) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.671:72) : pid=1 uid=root auid=unset ses=unset msg='unit=postfix comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:55.784:73) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:56.089:74) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:56.145:75) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:56.308:76) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:56.369:77) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:56.512:78) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-mariadb comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:56.861:79) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:57.496:80) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:28:57.749:81) : prog-id=24 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:57.771:82) : pid=1 uid=root auid=unset ses=unset msg='unit=epmd@0.0.0.0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:58.797:83) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:59.432:84) : pid=1 uid=root auid=unset ses=unset msg='unit=polkit comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:28:59.447:85) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 17:29:01.931:86) : proctitle=/usr/bin/suricata -c /run/udv/suricata-wrapper/suricata.yml -s /run/udv/suricata-wrapper/suricata.rules -vv --af-packet 
type=SYSCALL msg=audit(12.03.2026 17:29:01.931:86) : arch=x86_64 syscall=setsockopt success=yes exit=0 a0=0x6 a1=SOL_PACKET a2=PACKET_ADD_MEMBERSHIP a3=0x7fd768d6d240 items=0 ppid=1 pid=4309 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=W#01-ens33 exe=/usr/bin/suricata key=(null) 
type=ANOM_PROMISCUOUS msg=audit(12.03.2026 17:29:01.931:86) : dev=ens33 prom=yes old_prom=no auid=unset uid=root gid=root ses=unset 
----
type=ANOM_PROMISCUOUS msg=audit(12.03.2026 17:29:04.175:87) : dev=ens33 prom=no old_prom=yes auid=unset uid=root gid=root ses=unset 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:29:04.186:88) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:04.192:89) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:05.611:90) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:06.104:91) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:06.209:92) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:06.908:93) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.187:94) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.418:95) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.428:96) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:29:07.429:97) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.456:98) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.502:99) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.591:100) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.842:101) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.950:102) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:07.990:103) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:08.035:104) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:08.405:105) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:08.803:106) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.128:107) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.254:108) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.254:109) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.254:110) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.387:111) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.426:112) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.471:113) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.597:114) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.598:115) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.764:116) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:09.797:117) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 17:29:09.980:118) : proctitle=/usr/bin/stenotype --threads=1 --dir=/tmp/stenographer2112938665 --iface=ens33 
type=SYSCALL msg=audit(12.03.2026 17:29:09.980:118) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0x8914 a2=0x7ffdb0d69560 a3=0x11 items=0 ppid=4502 pid=4535 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=stenotype exe=/usr/bin/stenotype key=(null) 
type=ANOM_PROMISCUOUS msg=audit(12.03.2026 17:29:09.980:118) : dev=ens33 prom=yes old_prom=no auid=unset uid=root gid=root ses=unset 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:10.289:119) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:10.320:120) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:10.433:121) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:10.543:122) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:10.567:123) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:10.653:124) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:29:10.781:125) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:10.828:126) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:11.221:127) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:11.310:128) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:12.012:129) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:12.725:130) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:14.913:131) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:14.920:132) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-logstash comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:14.925:133) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-dashboards comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:15.262:134) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-esper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:15.456:135) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-controller comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:18.100:136) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:18.840:137) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:24.831:138) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(12.03.2026 17:29:24.831:139) : prog-id=25 op=LOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:24.839:140) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SYSTEM_RUNLEVEL msg=audit(12.03.2026 17:29:24.849:141) : pid=5233 uid=root auid=unset ses=unset msg='old-level=N new-level=3 comm=systemd-update-utmp exe=/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:29:24.856:142) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-update-utmp-runlevel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:29:24.856:143) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-update-utmp-runlevel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:30:01.091:144) : pid=5714 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:30:01.093:145) : pid=5714 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:30:01.094:146) : pid=5714 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=1 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:30:01.094:146) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 17:30:01.094:146) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=5714 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 17:30:01.118:147) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:30:01.130:148) : pid=5719 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:30:01.130:149) : pid=5719 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 17:30:01.130:150) : pid=5719 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=2 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:30:01.130:150) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:30:01.130:150) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=5719 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:30:01.132:151) : pid=5719 uid=root auid=root ses=2 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 17:30:01.147:152) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:30:01.147:152) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffeaf575ee0 a2=0x78 a3=0x7ffeaf575ee0 items=0 ppid=1 pid=5719 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:30:01.147:152) : prog-id=26 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:30:01.147:153) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:30:01.147:153) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffeaf575fa0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=5719 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:30:01.147:153) : prog-id=26 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:30:01.147:154) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:30:01.147:154) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffeaf575fb0 a2=0x78 a3=0x7ffeaf575fb0 items=0 ppid=1 pid=5719 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:30:01.147:154) : prog-id=27 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:30:01.147:155) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:30:01.147:155) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffeaf575fb0 a2=0x78 a3=0x7ffeaf575fb0 items=0 ppid=1 pid=5719 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:30:01.147:155) : prog-id=27 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:30:01.241:156) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 17:30:01.258:157) : pid=5714 uid=root auid=root ses=1 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:30:01.262:158) : pid=5730 uid=root auid=root ses=1 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:30:01.266:159) : pid=5714 uid=root auid=root ses=1 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:30:11.360:160) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:30:11.383:161) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:30:15.289:162) : pid=5766 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:30:15.294:163) : pid=5766 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:30:15.295:164) : pid=5766 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:30:15.295:165) : pid=5766 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=3 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:30:15.295:165) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 17:30:15.295:165) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffde6951ed0 a2=0x3 a3=0x7f77062f2459 items=0 ppid=2876 pid=5766 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=3 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 17:30:15.320:166) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@500 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:30:15.326:167) : pid=5772 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:30:15.326:168) : pid=5772 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=datapk exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 17:30:15.326:169) : pid=5772 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=4 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:30:15.326:169) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:30:15.326:169) : arch=x86_64 syscall=write success=yes exit=3 a0=0x8 a1=0x7ffe0cced2b0 a2=0x3 a3=0x7f3794925459 items=0 ppid=1 pid=5772 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:30:15.327:170) : pid=5772 uid=root auid=datapk ses=4 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=datapk exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:30:15.392:171) : pid=1 uid=root auid=unset ses=unset msg='unit=user@500 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 17:30:15.396:172) : pid=5766 uid=root auid=datapk ses=3 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:30:15.397:173) : pid=5781 uid=root auid=datapk ses=3 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:35:59.981:174) : pid=7437 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:35:59.994:175) : pid=7437 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:35:59.996:176) : pid=7437 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:35:59.996:177) : pid=7437 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=5 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:35:59.996:177) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 17:35:59.996:177) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffee9978b00 a2=0x3 a3=0x7f81ba847459 items=0 ppid=2876 pid=7437 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=5 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:36:00.013:178) : pid=7437 uid=root auid=datapk ses=5 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:36:00.014:179) : pid=7481 uid=root auid=datapk ses=5 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:36:00.079:180) : pid=7450 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:36:00.080:181) : pid=7450 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:36:00.081:182) : pid=7450 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:36:00.081:183) : pid=7450 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=6 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:36:00.081:183) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(12.03.2026 17:36:00.081:183) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffc06548380 a2=0x3 a3=0x7f637a2a1459 items=0 ppid=2876 pid=7450 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=6 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:36:00.098:184) : pid=7450 uid=root auid=datapk ses=6 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:36:00.099:185) : pid=7792 uid=root auid=datapk ses=6 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_LOGIN msg=audit(12.03.2026 17:36:02.785:186) : pid=7437 uid=root auid=datapk ses=5 msg='op=login id=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=/dev/pts/0 res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:36:11.566:187) : pid=7874 uid=datapk auid=datapk ses=5 msg='op=PAM:authentication grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:36:11.567:188) : pid=7874 uid=datapk auid=datapk ses=5 msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_START msg=audit(12.03.2026 17:36:11.567:189) : pid=7874 uid=datapk auid=datapk ses=5 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:36:11.568:190) : pid=7874 uid=datapk auid=datapk ses=5 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:40:01.466:191) : pid=10529 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:40:01.466:192) : pid=10529 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:40:01.466:193) : pid=10529 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=7 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:40:01.466:193) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 17:40:01.466:193) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=10529 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=7 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 17:40:01.481:194) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:40:01.484:195) : pid=10532 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:40:01.484:196) : pid=10532 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 17:40:01.485:197) : pid=10532 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=8 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:40:01.485:197) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:40:01.485:197) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=10532 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=8 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:40:01.486:198) : pid=10532 uid=root auid=root ses=8 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 17:40:01.489:199) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:40:01.489:199) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffff2a69530 a2=0x78 a3=0x7ffff2a69530 items=0 ppid=1 pid=10532 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=8 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:40:01.489:199) : prog-id=28 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:40:01.489:200) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:40:01.489:200) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffff2a695f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=10532 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=8 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:40:01.489:200) : prog-id=28 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:40:01.490:201) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:40:01.490:201) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffff2a69600 a2=0x78 a3=0x7ffff2a69600 items=0 ppid=1 pid=10532 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=8 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:40:01.490:201) : prog-id=29 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:40:01.490:202) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:40:01.490:202) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffff2a69600 a2=0x78 a3=0x7ffff2a69600 items=0 ppid=1 pid=10532 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=8 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:40:01.490:202) : prog-id=29 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:40:01.545:203) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 17:40:01.550:204) : pid=10529 uid=root auid=root ses=7 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:40:01.551:205) : pid=10542 uid=root auid=root ses=7 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:40:01.553:206) : pid=10529 uid=root auid=root ses=7 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:40:11.604:207) : pid=10534 uid=root auid=root ses=8 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:40:11.605:208) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:40:11.619:209) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(12.03.2026 17:43:49.781:210) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-tmpfiles-clean comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:43:49.781:211) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-tmpfiles-clean comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 17:50:01.941:212) : pid=17201 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:50:01.941:213) : pid=17201 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 17:50:01.941:214) : pid=17201 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=9 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:50:01.941:214) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 17:50:01.941:214) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=17201 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=9 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 17:50:01.964:215) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 17:50:01.967:216) : pid=17204 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:50:01.967:217) : pid=17204 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 17:50:01.968:218) : pid=17204 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=10 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 17:50:01.968:218) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:50:01.968:218) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=17204 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=10 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 17:50:01.969:219) : pid=17204 uid=root auid=root ses=10 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 17:50:01.972:220) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:50:01.972:220) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe96a0ddf0 a2=0x78 a3=0x7ffe96a0ddf0 items=0 ppid=1 pid=17204 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=10 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:50:01.972:220) : prog-id=30 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:50:01.972:221) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:50:01.972:221) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe96a0deb0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=17204 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=10 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:50:01.972:221) : prog-id=30 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:50:01.972:222) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:50:01.972:222) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe96a0dec0 a2=0x78 a3=0x7ffe96a0dec0 items=0 ppid=1 pid=17204 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=10 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:50:01.972:222) : prog-id=31 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 17:50:01.972:223) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 17:50:01.972:223) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe96a0dec0 a2=0x78 a3=0x7ffe96a0dec0 items=0 ppid=1 pid=17204 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=10 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 17:50:01.972:223) : prog-id=31 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 17:50:02.018:224) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 17:50:02.021:225) : pid=17201 uid=root auid=root ses=9 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 17:50:02.021:226) : pid=17213 uid=root auid=root ses=9 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 17:50:02.023:227) : pid=17201 uid=root auid=root ses=9 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 17:50:12.102:228) : pid=17206 uid=root auid=root ses=10 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:50:12.103:229) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 17:50:12.112:230) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 18:00:01.440:231) : pid=23517 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:00:01.441:232) : pid=23517 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 18:00:01.442:233) : pid=23517 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=11 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:00:01.442:233) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 18:00:01.442:233) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=23517 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=11 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 18:00:01.466:234) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:00:01.472:235) : pid=23520 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:00:01.472:236) : pid=23520 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 18:00:01.473:237) : pid=23520 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=12 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:00:01.473:237) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:00:01.473:237) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=23520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=12 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 18:00:01.474:238) : pid=23520 uid=root auid=root ses=12 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 18:00:01.477:239) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:00:01.477:239) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc3f039010 a2=0x78 a3=0x7ffc3f039010 items=0 ppid=1 pid=23520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=12 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:00:01.477:239) : prog-id=32 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:00:01.477:240) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:00:01.477:240) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc3f0390d0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=23520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=12 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:00:01.477:240) : prog-id=32 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:00:01.477:241) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:00:01.477:241) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc3f0390e0 a2=0x78 a3=0x7ffc3f0390e0 items=0 ppid=1 pid=23520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=12 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:00:01.477:241) : prog-id=33 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:00:01.477:242) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:00:01.477:242) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc3f0390e0 a2=0x78 a3=0x7ffc3f0390e0 items=0 ppid=1 pid=23520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=12 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:00:01.477:242) : prog-id=33 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 18:00:01.532:243) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 18:00:01.537:244) : pid=23517 uid=root auid=root ses=11 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:00:01.538:245) : pid=23529 uid=root auid=root ses=11 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 18:00:01.540:246) : pid=23517 uid=root auid=root ses=11 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 18:00:11.607:247) : pid=23522 uid=root auid=root ses=12 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:00:11.608:248) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:00:11.626:249) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 18:01:01.397:250) : pid=24156 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:01:01.398:251) : pid=24156 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 18:01:01.398:252) : pid=24156 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=13 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:01:01.398:252) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 18:01:01.398:252) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=24156 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=13 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 18:01:01.417:253) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:01:01.420:254) : pid=24159 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:01:01.420:255) : pid=24159 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 18:01:01.420:256) : pid=24159 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=14 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:01:01.420:256) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:01:01.420:256) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=24159 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=14 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 18:01:01.422:257) : pid=24159 uid=root auid=root ses=14 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 18:01:01.426:258) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:01:01.426:258) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe0404e230 a2=0x78 a3=0x7ffe0404e230 items=0 ppid=1 pid=24159 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=14 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:01:01.426:258) : prog-id=34 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:01:01.426:259) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:01:01.426:259) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe0404e2f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=24159 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=14 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:01:01.426:259) : prog-id=34 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:01:01.426:260) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:01:01.426:260) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe0404e300 a2=0x78 a3=0x7ffe0404e300 items=0 ppid=1 pid=24159 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=14 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:01:01.426:260) : prog-id=35 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:01:01.426:261) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:01:01.426:261) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe0404e300 a2=0x78 a3=0x7ffe0404e300 items=0 ppid=1 pid=24159 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=14 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:01:01.426:261) : prog-id=35 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 18:01:01.473:262) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 18:01:01.477:263) : pid=24156 uid=root auid=root ses=13 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:01:01.477:264) : pid=24168 uid=root auid=root ses=13 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 18:01:01.479:265) : pid=24156 uid=root auid=root ses=13 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 18:01:11.600:266) : pid=24161 uid=root auid=root ses=14 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:01:11.601:267) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:01:11.613:268) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 18:10:01.806:269) : pid=30428 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:10:01.808:270) : pid=30428 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 18:10:01.808:271) : pid=30428 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=15 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:10:01.808:271) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 18:10:01.808:271) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=30428 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=15 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 18:10:01.829:272) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:10:01.843:273) : pid=30431 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:10:01.843:274) : pid=30431 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 18:10:01.843:275) : pid=30431 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=16 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:10:01.843:275) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:10:01.843:275) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=30431 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=16 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 18:10:01.845:276) : pid=30431 uid=root auid=root ses=16 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 18:10:01.851:277) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:10:01.851:277) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe2be045f0 a2=0x78 a3=0x7ffe2be045f0 items=0 ppid=1 pid=30431 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=16 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:10:01.851:277) : prog-id=36 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:10:01.852:278) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:10:01.852:278) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe2be046b0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=30431 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=16 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:10:01.852:278) : prog-id=36 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:10:01.852:279) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:10:01.852:279) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe2be046c0 a2=0x78 a3=0x7ffe2be046c0 items=0 ppid=1 pid=30431 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=16 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:10:01.852:279) : prog-id=37 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:10:01.852:280) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:10:01.852:280) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe2be046c0 a2=0x78 a3=0x7ffe2be046c0 items=0 ppid=1 pid=30431 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=16 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:10:01.852:280) : prog-id=37 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 18:10:01.898:281) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 18:10:01.902:282) : pid=30428 uid=root auid=root ses=15 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:10:01.902:283) : pid=30440 uid=root auid=root ses=15 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 18:10:01.904:284) : pid=30428 uid=root auid=root ses=15 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:10:12.105:285) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:10:12.122:286) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 18:20:01.255:287) : pid=37007 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:20:01.256:288) : pid=37007 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 18:20:01.256:289) : pid=37007 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=17 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:20:01.256:289) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 18:20:01.256:289) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=37007 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=17 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 18:20:01.278:290) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:20:01.283:291) : pid=37010 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:20:01.283:292) : pid=37010 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 18:20:01.283:293) : pid=37010 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=18 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:20:01.283:293) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:20:01.283:293) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=37010 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=18 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 18:20:01.286:294) : pid=37010 uid=root auid=root ses=18 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 18:20:01.303:295) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:20:01.303:295) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffeec765dc0 a2=0x78 a3=0x7ffeec765dc0 items=0 ppid=1 pid=37010 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=18 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:20:01.303:295) : prog-id=38 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:20:01.303:296) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:20:01.303:296) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffeec765e80 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=37010 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=18 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:20:01.303:296) : prog-id=38 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:20:01.303:297) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:20:01.303:297) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffeec765e90 a2=0x78 a3=0x7ffeec765e90 items=0 ppid=1 pid=37010 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=18 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:20:01.303:297) : prog-id=39 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:20:01.303:298) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:20:01.303:298) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffeec765e90 a2=0x78 a3=0x7ffeec765e90 items=0 ppid=1 pid=37010 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=18 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:20:01.303:298) : prog-id=39 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 18:20:01.353:299) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 18:20:01.356:300) : pid=37007 uid=root auid=root ses=17 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:20:01.356:301) : pid=37019 uid=root auid=root ses=17 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 18:20:01.358:302) : pid=37007 uid=root auid=root ses=17 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 18:20:11.605:303) : pid=37012 uid=root auid=root ses=18 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:20:11.605:304) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:20:11.620:305) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 18:30:01.723:306) : pid=43772 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:30:01.724:307) : pid=43772 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 18:30:01.724:308) : pid=43772 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=19 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:30:01.724:308) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 18:30:01.724:308) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=43772 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=19 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 18:30:01.743:309) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:30:01.747:310) : pid=43775 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:30:01.747:311) : pid=43775 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 18:30:01.748:312) : pid=43775 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=20 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:30:01.748:312) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:30:01.748:312) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=43775 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=20 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 18:30:01.750:313) : pid=43775 uid=root auid=root ses=20 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 18:30:01.754:314) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:30:01.754:314) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc75f6de90 a2=0x78 a3=0x7ffc75f6de90 items=0 ppid=1 pid=43775 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=20 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:30:01.754:314) : prog-id=40 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:30:01.754:315) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:30:01.754:315) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc75f6df50 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=43775 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=20 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:30:01.754:315) : prog-id=40 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:30:01.754:316) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:30:01.754:316) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc75f6df60 a2=0x78 a3=0x7ffc75f6df60 items=0 ppid=1 pid=43775 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=20 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:30:01.754:316) : prog-id=41 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:30:01.754:317) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:30:01.754:317) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc75f6df60 a2=0x78 a3=0x7ffc75f6df60 items=0 ppid=1 pid=43775 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=20 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:30:01.754:317) : prog-id=41 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 18:30:01.800:318) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 18:30:01.803:319) : pid=43772 uid=root auid=root ses=19 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:30:01.804:320) : pid=43784 uid=root auid=root ses=19 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 18:30:01.807:321) : pid=43772 uid=root auid=root ses=19 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 18:30:11.853:322) : pid=43777 uid=root auid=root ses=20 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:30:11.854:323) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:30:11.865:324) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 18:40:01.222:325) : pid=50483 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:40:01.222:326) : pid=50483 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 18:40:01.222:327) : pid=50483 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=21 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:40:01.222:327) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 18:40:01.222:327) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=50483 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=21 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 18:40:01.243:328) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:40:01.247:329) : pid=50486 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:40:01.247:330) : pid=50486 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 18:40:01.247:331) : pid=50486 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=22 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:40:01.247:331) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:40:01.247:331) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=50486 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=22 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 18:40:01.247:332) : pid=50486 uid=root auid=root ses=22 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 18:40:01.253:333) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:40:01.253:333) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc19c41f50 a2=0x78 a3=0x7ffc19c41f50 items=0 ppid=1 pid=50486 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=22 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:40:01.253:333) : prog-id=42 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:40:01.253:334) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:40:01.253:334) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc19c42010 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=50486 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=22 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:40:01.253:334) : prog-id=42 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:40:01.253:335) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:40:01.253:335) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc19c42020 a2=0x78 a3=0x7ffc19c42020 items=0 ppid=1 pid=50486 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=22 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:40:01.253:335) : prog-id=43 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:40:01.253:336) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:40:01.253:336) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc19c42020 a2=0x78 a3=0x7ffc19c42020 items=0 ppid=1 pid=50486 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=22 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:40:01.253:336) : prog-id=43 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 18:40:01.314:337) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 18:40:01.319:338) : pid=50483 uid=root auid=root ses=21 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:40:01.319:339) : pid=50495 uid=root auid=root ses=21 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 18:40:01.321:340) : pid=50483 uid=root auid=root ses=21 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:40:11.353:341) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:40:11.365:342) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 18:50:01.710:343) : pid=57210 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:50:01.710:344) : pid=57210 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 18:50:01.710:345) : pid=57210 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=23 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:50:01.710:345) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 18:50:01.710:345) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=57210 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=23 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 18:50:01.729:346) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 18:50:01.732:347) : pid=57213 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:50:01.733:348) : pid=57213 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 18:50:01.733:349) : pid=57213 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=24 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 18:50:01.733:349) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:50:01.733:349) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=57213 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=24 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 18:50:01.734:350) : pid=57213 uid=root auid=root ses=24 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 18:50:01.738:351) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:50:01.738:351) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc8d880600 a2=0x78 a3=0x7ffc8d880600 items=0 ppid=1 pid=57213 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=24 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:50:01.738:351) : prog-id=44 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:50:01.738:352) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:50:01.738:352) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc8d8806c0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=57213 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=24 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:50:01.738:352) : prog-id=44 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:50:01.738:353) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:50:01.738:353) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc8d8806d0 a2=0x78 a3=0x7ffc8d8806d0 items=0 ppid=1 pid=57213 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=24 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:50:01.738:353) : prog-id=45 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 18:50:01.738:354) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 18:50:01.738:354) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc8d8806d0 a2=0x78 a3=0x7ffc8d8806d0 items=0 ppid=1 pid=57213 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=24 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 18:50:01.738:354) : prog-id=45 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 18:50:01.794:355) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 18:50:01.798:356) : pid=57210 uid=root auid=root ses=23 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 18:50:01.798:357) : pid=57222 uid=root auid=root ses=23 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 18:50:01.800:358) : pid=57210 uid=root auid=root ses=23 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:50:11.854:359) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 18:50:11.863:360) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 19:00:01.177:361) : pid=64219 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:00:01.178:362) : pid=64219 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 19:00:01.178:363) : pid=64219 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=25 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:00:01.178:363) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 19:00:01.178:363) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=64219 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=25 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 19:00:01.198:364) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:00:01.202:365) : pid=64222 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:00:01.202:366) : pid=64222 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 19:00:01.202:367) : pid=64222 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=26 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:00:01.202:367) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:00:01.202:367) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=64222 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=26 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 19:00:01.207:368) : pid=64222 uid=root auid=root ses=26 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 19:00:01.217:369) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:00:01.217:369) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff5061de90 a2=0x78 a3=0x7fff5061de90 items=0 ppid=1 pid=64222 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=26 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:00:01.217:369) : prog-id=46 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:00:01.217:370) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:00:01.217:370) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff5061df50 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=64222 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=26 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:00:01.217:370) : prog-id=46 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:00:01.217:371) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:00:01.217:371) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff5061df60 a2=0x78 a3=0x7fff5061df60 items=0 ppid=1 pid=64222 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=26 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:00:01.217:371) : prog-id=47 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:00:01.217:372) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:00:01.217:372) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff5061df60 a2=0x78 a3=0x7fff5061df60 items=0 ppid=1 pid=64222 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=26 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:00:01.217:372) : prog-id=47 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 19:00:01.278:373) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 19:00:01.282:374) : pid=64219 uid=root auid=root ses=25 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:00:01.282:375) : pid=64231 uid=root auid=root ses=25 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 19:00:01.284:376) : pid=64219 uid=root auid=root ses=25 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:00:11.356:377) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:00:11.378:378) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 19:01:01.129:379) : pid=64821 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:01:01.130:380) : pid=64821 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 19:01:01.130:381) : pid=64821 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=27 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:01:01.130:381) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 19:01:01.130:381) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=64821 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=27 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 19:01:01.152:382) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:01:01.154:383) : pid=64824 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:01:01.154:384) : pid=64824 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 19:01:01.156:385) : pid=64824 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=28 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:01:01.156:385) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:01:01.156:385) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=64824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=28 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 19:01:01.156:386) : pid=64824 uid=root auid=root ses=28 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 19:01:01.159:387) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:01:01.159:387) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe712fc090 a2=0x78 a3=0x7ffe712fc090 items=0 ppid=1 pid=64824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=28 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:01:01.159:387) : prog-id=48 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:01:01.159:388) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:01:01.159:388) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe712fc150 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=64824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=28 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:01:01.159:388) : prog-id=48 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:01:01.159:389) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:01:01.159:389) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe712fc160 a2=0x78 a3=0x7ffe712fc160 items=0 ppid=1 pid=64824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=28 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:01:01.159:389) : prog-id=49 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:01:01.160:390) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:01:01.160:390) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe712fc160 a2=0x78 a3=0x7ffe712fc160 items=0 ppid=1 pid=64824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=28 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:01:01.160:390) : prog-id=49 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 19:01:01.212:391) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 19:01:01.217:392) : pid=64821 uid=root auid=root ses=27 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:01:01.218:393) : pid=64833 uid=root auid=root ses=27 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 19:01:01.220:394) : pid=64821 uid=root auid=root ses=27 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 19:01:11.356:395) : pid=64826 uid=root auid=root ses=28 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:01:11.356:396) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:01:11.365:397) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 19:10:01.538:398) : pid=71112 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:10:01.539:399) : pid=71112 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 19:10:01.539:400) : pid=71112 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=29 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:10:01.539:400) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 19:10:01.539:400) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=71112 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=29 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 19:10:01.556:401) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:10:01.561:402) : pid=71115 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:10:01.561:403) : pid=71115 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 19:10:01.561:404) : pid=71115 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=30 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:10:01.561:404) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:10:01.561:404) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=71115 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=30 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 19:10:01.563:405) : pid=71115 uid=root auid=root ses=30 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 19:10:01.566:406) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:10:01.566:406) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffda6b03030 a2=0x78 a3=0x7ffda6b03030 items=0 ppid=1 pid=71115 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=30 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:10:01.566:406) : prog-id=50 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:10:01.567:407) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:10:01.567:407) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffda6b030f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=71115 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=30 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:10:01.567:407) : prog-id=50 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:10:01.567:408) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:10:01.567:408) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffda6b03100 a2=0x78 a3=0x7ffda6b03100 items=0 ppid=1 pid=71115 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=30 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:10:01.567:408) : prog-id=51 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:10:01.567:409) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:10:01.567:409) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffda6b03100 a2=0x78 a3=0x7ffda6b03100 items=0 ppid=1 pid=71115 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=30 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:10:01.567:409) : prog-id=51 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 19:10:01.615:410) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 19:10:01.620:411) : pid=71112 uid=root auid=root ses=29 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:10:01.620:412) : pid=71124 uid=root auid=root ses=29 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 19:10:01.622:413) : pid=71112 uid=root auid=root ses=29 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:10:11.852:414) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:10:11.863:415) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 19:20:02.028:416) : pid=77708 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:20:02.029:417) : pid=77708 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 19:20:02.029:418) : pid=77708 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=31 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:20:02.029:418) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 19:20:02.029:418) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=77708 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=31 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 19:20:02.052:419) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:20:02.055:420) : pid=77711 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:20:02.055:421) : pid=77711 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 19:20:02.056:422) : pid=77711 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=32 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:20:02.056:422) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:20:02.056:422) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=77711 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=32 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 19:20:02.057:423) : pid=77711 uid=root auid=root ses=32 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 19:20:02.062:424) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:20:02.062:424) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc299eb8a0 a2=0x78 a3=0x7ffc299eb8a0 items=0 ppid=1 pid=77711 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=32 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:20:02.062:424) : prog-id=52 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:20:02.062:425) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:20:02.062:425) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc299eb960 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=77711 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=32 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:20:02.062:425) : prog-id=52 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:20:02.062:426) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:20:02.062:426) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc299eb970 a2=0x78 a3=0x7ffc299eb970 items=0 ppid=1 pid=77711 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=32 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:20:02.062:426) : prog-id=53 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:20:02.062:427) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:20:02.062:427) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc299eb970 a2=0x78 a3=0x7ffc299eb970 items=0 ppid=1 pid=77711 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=32 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:20:02.062:427) : prog-id=53 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 19:20:02.117:428) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 19:20:02.121:429) : pid=77708 uid=root auid=root ses=31 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:20:02.122:430) : pid=77720 uid=root auid=root ses=31 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 19:20:02.124:431) : pid=77708 uid=root auid=root ses=31 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 19:20:12.356:432) : pid=77713 uid=root auid=root ses=32 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:20:12.356:433) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:20:12.372:434) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 19:30:01.487:435) : pid=84636 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:30:01.488:436) : pid=84636 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 19:30:01.488:437) : pid=84636 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=33 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:30:01.488:437) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 19:30:01.488:437) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=84636 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=33 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 19:30:01.507:438) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:30:01.511:439) : pid=84639 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:30:01.511:440) : pid=84639 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 19:30:01.512:441) : pid=84639 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=34 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:30:01.512:441) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:30:01.512:441) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=84639 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=34 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 19:30:01.513:442) : pid=84639 uid=root auid=root ses=34 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 19:30:01.518:443) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:30:01.518:443) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe4e962ec0 a2=0x78 a3=0x7ffe4e962ec0 items=0 ppid=1 pid=84639 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=34 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:30:01.518:443) : prog-id=54 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:30:01.518:444) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:30:01.518:444) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe4e962f80 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=84639 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=34 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:30:01.518:444) : prog-id=54 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:30:01.519:445) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:30:01.519:445) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe4e962f90 a2=0x78 a3=0x7ffe4e962f90 items=0 ppid=1 pid=84639 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=34 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:30:01.519:445) : prog-id=55 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:30:01.519:446) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:30:01.519:446) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe4e962f90 a2=0x78 a3=0x7ffe4e962f90 items=0 ppid=1 pid=84639 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=34 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:30:01.519:446) : prog-id=55 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 19:30:01.583:447) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 19:30:01.587:448) : pid=84636 uid=root auid=root ses=33 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:30:01.588:449) : pid=84648 uid=root auid=root ses=33 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 19:30:01.589:450) : pid=84636 uid=root auid=root ses=33 msg='op=PAM:session_close grantors=? acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:30:11.602:451) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:30:11.621:452) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 19:40:01.936:453) : pid=91355 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:40:01.938:454) : pid=91355 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 19:40:01.938:455) : pid=91355 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=35 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:40:01.938:455) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 19:40:01.938:455) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=91355 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=35 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 19:40:01.957:456) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:40:01.962:457) : pid=91358 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:40:01.962:458) : pid=91358 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 19:40:01.963:459) : pid=91358 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=36 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:40:01.963:459) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:40:01.963:459) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=91358 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=36 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 19:40:01.965:460) : pid=91358 uid=root auid=root ses=36 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 19:40:01.968:461) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:40:01.968:461) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffed3d66780 a2=0x78 a3=0x7ffed3d66780 items=0 ppid=1 pid=91358 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=36 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:40:01.968:461) : prog-id=56 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:40:01.968:462) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:40:01.968:462) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffed3d66840 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=91358 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=36 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:40:01.968:462) : prog-id=56 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:40:01.968:463) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:40:01.968:463) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffed3d66850 a2=0x78 a3=0x7ffed3d66850 items=0 ppid=1 pid=91358 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=36 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:40:01.968:463) : prog-id=57 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:40:01.968:464) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:40:01.968:464) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffed3d66850 a2=0x78 a3=0x7ffed3d66850 items=0 ppid=1 pid=91358 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=36 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:40:01.968:464) : prog-id=57 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 19:40:02.016:465) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 19:40:02.020:466) : pid=91355 uid=root auid=root ses=35 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:40:02.021:467) : pid=91367 uid=root auid=root ses=35 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 19:40:02.022:468) : pid=91355 uid=root auid=root ses=35 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 19:40:12.104:469) : pid=91360 uid=root auid=root ses=36 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:40:12.104:470) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:40:12.117:471) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 19:50:01.423:472) : pid=98205 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:50:01.425:473) : pid=98205 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 19:50:01.425:474) : pid=98205 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=37 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:50:01.425:474) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 19:50:01.425:474) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=98205 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=37 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 19:50:01.441:475) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 19:50:01.446:476) : pid=98208 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:50:01.446:477) : pid=98208 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 19:50:01.446:478) : pid=98208 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=38 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 19:50:01.446:478) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:50:01.446:478) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=98208 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=38 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 19:50:01.447:479) : pid=98208 uid=root auid=root ses=38 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 19:50:01.451:480) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:50:01.451:480) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff120e36b0 a2=0x78 a3=0x7fff120e36b0 items=0 ppid=1 pid=98208 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=38 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:50:01.451:480) : prog-id=58 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:50:01.451:481) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:50:01.451:481) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff120e3770 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=98208 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=38 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:50:01.451:481) : prog-id=58 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:50:01.451:482) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:50:01.451:482) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff120e3780 a2=0x78 a3=0x7fff120e3780 items=0 ppid=1 pid=98208 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=38 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:50:01.451:482) : prog-id=59 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 19:50:01.451:483) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 19:50:01.451:483) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff120e3780 a2=0x78 a3=0x7fff120e3780 items=0 ppid=1 pid=98208 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=38 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 19:50:01.451:483) : prog-id=59 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 19:50:01.506:484) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 19:50:01.509:485) : pid=98205 uid=root auid=root ses=37 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 19:50:01.510:486) : pid=98217 uid=root auid=root ses=37 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 19:50:01.511:487) : pid=98205 uid=root auid=root ses=37 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:50:11.601:488) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 19:50:11.611:489) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 20:00:01.918:490) : pid=105133 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:00:01.919:491) : pid=105133 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 20:00:01.919:492) : pid=105133 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=39 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:00:01.919:492) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 20:00:01.919:492) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=105133 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=39 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 20:00:01.938:493) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:00:01.941:494) : pid=105136 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:00:01.941:495) : pid=105136 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 20:00:01.942:496) : pid=105136 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=40 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:00:01.942:496) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:00:01.942:496) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=105136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=40 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 20:00:01.944:497) : pid=105136 uid=root auid=root ses=40 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 20:00:01.947:498) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:00:01.947:498) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe147d0d20 a2=0x78 a3=0x7ffe147d0d20 items=0 ppid=1 pid=105136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=40 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:00:01.947:498) : prog-id=60 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:00:01.947:499) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:00:01.947:499) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe147d0de0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=105136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=40 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:00:01.947:499) : prog-id=60 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:00:01.947:500) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:00:01.947:500) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe147d0df0 a2=0x78 a3=0x7ffe147d0df0 items=0 ppid=1 pid=105136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=40 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:00:01.947:500) : prog-id=61 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:00:01.947:501) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:00:01.947:501) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe147d0df0 a2=0x78 a3=0x7ffe147d0df0 items=0 ppid=1 pid=105136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=40 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:00:01.947:501) : prog-id=61 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 20:00:02.008:502) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 20:00:02.011:503) : pid=105133 uid=root auid=root ses=39 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:00:02.011:504) : pid=105145 uid=root auid=root ses=39 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 20:00:02.013:505) : pid=105133 uid=root auid=root ses=39 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 20:00:12.106:506) : pid=105138 uid=root auid=root ses=40 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:00:12.106:507) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:00:12.118:508) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 20:01:01.878:509) : pid=105778 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:01:01.879:510) : pid=105778 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 20:01:01.879:511) : pid=105778 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=41 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:01:01.879:511) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 20:01:01.879:511) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=105778 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=41 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 20:01:01.899:512) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:01:01.902:513) : pid=105781 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:01:01.902:514) : pid=105781 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 20:01:01.903:515) : pid=105781 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=42 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:01:01.903:515) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:01:01.903:515) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=105781 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=42 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 20:01:01.904:516) : pid=105781 uid=root auid=root ses=42 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 20:01:01.929:517) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:01:01.929:517) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe19b72210 a2=0x78 a3=0x7ffe19b72210 items=0 ppid=1 pid=105781 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=42 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:01:01.929:517) : prog-id=62 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:01:01.929:518) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:01:01.929:518) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe19b722d0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=105781 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=42 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:01:01.929:518) : prog-id=62 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:01:01.929:519) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:01:01.929:519) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe19b722e0 a2=0x78 a3=0x7ffe19b722e0 items=0 ppid=1 pid=105781 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=42 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:01:01.929:519) : prog-id=63 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:01:01.929:520) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:01:01.929:520) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe19b722e0 a2=0x78 a3=0x7ffe19b722e0 items=0 ppid=1 pid=105781 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=42 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:01:01.929:520) : prog-id=63 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 20:01:01.972:521) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 20:01:01.976:522) : pid=105778 uid=root auid=root ses=41 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:01:01.976:523) : pid=105791 uid=root auid=root ses=41 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 20:01:01.978:524) : pid=105778 uid=root auid=root ses=41 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:01:12.102:525) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:01:12.116:526) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 20:10:01.296:527) : pid=112118 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:10:01.297:528) : pid=112118 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 20:10:01.297:529) : pid=112118 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=43 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:10:01.297:529) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 20:10:01.297:529) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=112118 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=43 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 20:10:01.316:530) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:10:01.320:531) : pid=112121 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:10:01.320:532) : pid=112121 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 20:10:01.320:533) : pid=112121 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=44 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:10:01.320:533) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:10:01.320:533) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=112121 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=44 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 20:10:01.321:534) : pid=112121 uid=root auid=root ses=44 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 20:10:01.324:535) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:10:01.324:535) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd2fd70520 a2=0x78 a3=0x7ffd2fd70520 items=0 ppid=1 pid=112121 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=44 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:10:01.324:535) : prog-id=64 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:10:01.325:536) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:10:01.325:536) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd2fd705e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=112121 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=44 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:10:01.325:536) : prog-id=64 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:10:01.325:537) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:10:01.325:537) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd2fd705f0 a2=0x78 a3=0x7ffd2fd705f0 items=0 ppid=1 pid=112121 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=44 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:10:01.325:537) : prog-id=65 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:10:01.325:538) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:10:01.325:538) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd2fd705f0 a2=0x78 a3=0x7ffd2fd705f0 items=0 ppid=1 pid=112121 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=44 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:10:01.325:538) : prog-id=65 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 20:10:01.371:539) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 20:10:01.375:540) : pid=112118 uid=root auid=root ses=43 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:10:01.375:541) : pid=112130 uid=root auid=root ses=43 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 20:10:01.378:542) : pid=112118 uid=root auid=root ses=43 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 20:10:11.604:543) : pid=112123 uid=root auid=root ses=44 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:10:11.605:544) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:10:11.628:545) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 20:20:01.780:546) : pid=118845 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:20:01.781:547) : pid=118845 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 20:20:01.782:548) : pid=118845 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=45 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:20:01.782:548) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 20:20:01.782:548) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=118845 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=45 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 20:20:01.809:549) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:20:01.816:550) : pid=118848 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:20:01.816:551) : pid=118848 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 20:20:01.816:552) : pid=118848 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=46 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:20:01.816:552) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:20:01.816:552) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=118848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=46 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 20:20:01.818:553) : pid=118848 uid=root auid=root ses=46 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 20:20:01.827:554) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:20:01.827:554) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd97bbde00 a2=0x78 a3=0x7ffd97bbde00 items=0 ppid=1 pid=118848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=46 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:20:01.827:554) : prog-id=66 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:20:01.827:555) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:20:01.827:555) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd97bbdec0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=118848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=46 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:20:01.827:555) : prog-id=66 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:20:01.827:556) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:20:01.827:556) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd97bbded0 a2=0x78 a3=0x7ffd97bbded0 items=0 ppid=1 pid=118848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=46 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:20:01.827:556) : prog-id=67 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:20:01.827:557) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:20:01.827:557) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd97bbded0 a2=0x78 a3=0x7ffd97bbded0 items=0 ppid=1 pid=118848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=46 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:20:01.827:557) : prog-id=67 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 20:20:01.869:558) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 20:20:01.871:559) : pid=118845 uid=root auid=root ses=45 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:20:01.872:560) : pid=118857 uid=root auid=root ses=45 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 20:20:01.873:561) : pid=118845 uid=root auid=root ses=45 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 20:20:12.107:562) : pid=118850 uid=root auid=root ses=46 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:20:12.107:563) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:20:12.118:564) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 20:30:01.259:565) : pid=125781 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:30:01.261:566) : pid=125781 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 20:30:01.261:567) : pid=125781 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=47 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:30:01.261:567) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 20:30:01.261:567) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=125781 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=47 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 20:30:01.284:568) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:30:01.288:569) : pid=125784 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:30:01.288:570) : pid=125784 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 20:30:01.289:571) : pid=125784 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=48 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:30:01.289:571) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:30:01.289:571) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=125784 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=48 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 20:30:01.290:572) : pid=125784 uid=root auid=root ses=48 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 20:30:01.306:573) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:30:01.306:573) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffca3091ca0 a2=0x78 a3=0x7ffca3091ca0 items=0 ppid=1 pid=125784 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=48 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:30:01.306:573) : prog-id=68 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:30:01.306:574) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:30:01.306:574) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffca3091d60 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=125784 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=48 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:30:01.306:574) : prog-id=68 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:30:01.306:575) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:30:01.306:575) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffca3091d70 a2=0x78 a3=0x7ffca3091d70 items=0 ppid=1 pid=125784 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=48 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:30:01.306:575) : prog-id=69 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:30:01.306:576) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:30:01.306:576) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffca3091d70 a2=0x78 a3=0x7ffca3091d70 items=0 ppid=1 pid=125784 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=48 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:30:01.306:576) : prog-id=69 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 20:30:01.347:577) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 20:30:01.352:578) : pid=125781 uid=root auid=root ses=47 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:30:01.353:579) : pid=125793 uid=root auid=root ses=47 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 20:30:01.355:580) : pid=125781 uid=root auid=root ses=47 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 20:30:11.605:581) : pid=125786 uid=root auid=root ses=48 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:30:11.605:582) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:30:11.618:583) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 20:40:01.747:584) : pid=132521 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:40:01.748:585) : pid=132521 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 20:40:01.748:586) : pid=132521 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=49 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:40:01.748:586) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 20:40:01.748:586) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=132521 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=49 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 20:40:01.770:587) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:40:01.775:588) : pid=132524 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:40:01.775:589) : pid=132524 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 20:40:01.775:590) : pid=132524 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=50 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:40:01.775:590) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:40:01.775:590) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=132524 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=50 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 20:40:01.776:591) : pid=132524 uid=root auid=root ses=50 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 20:40:01.780:592) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:40:01.780:592) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff8f83eb90 a2=0x78 a3=0x7fff8f83eb90 items=0 ppid=1 pid=132524 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=50 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:40:01.780:592) : prog-id=70 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:40:01.780:593) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:40:01.780:593) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff8f83ec50 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=132524 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=50 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:40:01.780:593) : prog-id=70 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:40:01.780:594) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:40:01.780:594) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff8f83ec60 a2=0x78 a3=0x7fff8f83ec60 items=0 ppid=1 pid=132524 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=50 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:40:01.780:594) : prog-id=71 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:40:01.780:595) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:40:01.780:595) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff8f83ec60 a2=0x78 a3=0x7fff8f83ec60 items=0 ppid=1 pid=132524 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=50 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:40:01.780:595) : prog-id=71 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 20:40:01.845:596) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 20:40:01.850:597) : pid=132521 uid=root auid=root ses=49 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:40:01.850:598) : pid=132533 uid=root auid=root ses=49 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 20:40:01.852:599) : pid=132521 uid=root auid=root ses=49 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 20:40:12.102:600) : pid=132526 uid=root auid=root ses=50 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:40:12.102:601) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:40:12.114:602) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 20:50:01.221:603) : pid=139505 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:50:01.223:604) : pid=139505 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 20:50:01.223:605) : pid=139505 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=51 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:50:01.223:605) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 20:50:01.223:605) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=139505 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=51 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 20:50:01.245:606) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 20:50:01.247:607) : pid=139508 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:50:01.247:608) : pid=139508 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 20:50:01.248:609) : pid=139508 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=52 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 20:50:01.248:609) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:50:01.248:609) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=139508 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=52 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 20:50:01.249:610) : pid=139508 uid=root auid=root ses=52 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 20:50:01.259:611) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:50:01.259:611) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc530bb530 a2=0x78 a3=0x7ffc530bb530 items=0 ppid=1 pid=139508 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=52 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:50:01.259:611) : prog-id=72 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:50:01.259:612) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:50:01.259:612) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc530bb5f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=139508 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=52 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:50:01.259:612) : prog-id=72 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:50:01.259:613) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:50:01.259:613) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc530bb600 a2=0x78 a3=0x7ffc530bb600 items=0 ppid=1 pid=139508 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=52 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:50:01.259:613) : prog-id=73 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 20:50:01.259:614) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 20:50:01.259:614) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc530bb600 a2=0x78 a3=0x7ffc530bb600 items=0 ppid=1 pid=139508 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=52 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 20:50:01.259:614) : prog-id=73 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 20:50:01.310:615) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 20:50:01.313:616) : pid=139505 uid=root auid=root ses=51 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 20:50:01.314:617) : pid=139517 uid=root auid=root ses=51 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 20:50:01.316:618) : pid=139505 uid=root auid=root ses=51 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 20:50:11.356:619) : pid=139510 uid=root auid=root ses=52 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:50:11.356:620) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 20:50:11.366:621) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 21:00:01.706:622) : pid=146522 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:00:01.707:623) : pid=146522 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 21:00:01.707:624) : pid=146522 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=53 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:00:01.707:624) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 21:00:01.707:624) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=146522 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=53 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 21:00:01.731:625) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:00:01.736:626) : pid=146525 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:00:01.736:627) : pid=146525 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 21:00:01.736:628) : pid=146525 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=54 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:00:01.736:628) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:00:01.736:628) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=146525 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=54 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 21:00:01.738:629) : pid=146525 uid=root auid=root ses=54 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 21:00:01.743:630) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:00:01.743:630) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe3b92bad0 a2=0x78 a3=0x7ffe3b92bad0 items=0 ppid=1 pid=146525 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=54 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:00:01.743:630) : prog-id=74 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:00:01.743:631) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:00:01.743:631) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe3b92bb90 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=146525 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=54 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:00:01.743:631) : prog-id=74 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:00:01.744:632) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:00:01.744:632) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe3b92bba0 a2=0x78 a3=0x7ffe3b92bba0 items=0 ppid=1 pid=146525 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=54 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:00:01.744:632) : prog-id=75 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:00:01.744:633) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:00:01.744:633) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe3b92bba0 a2=0x78 a3=0x7ffe3b92bba0 items=0 ppid=1 pid=146525 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=54 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:00:01.744:633) : prog-id=75 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 21:00:01.806:634) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 21:00:01.811:635) : pid=146522 uid=root auid=root ses=53 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:00:01.811:636) : pid=146534 uid=root auid=root ses=53 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 21:00:01.813:637) : pid=146522 uid=root auid=root ses=53 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 21:00:11.857:638) : pid=146527 uid=root auid=root ses=54 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:00:11.858:639) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:00:11.871:640) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 21:01:01.649:641) : pid=147163 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:01:01.650:642) : pid=147163 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 21:01:01.650:643) : pid=147163 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=55 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:01:01.650:643) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 21:01:01.650:643) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=147163 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=55 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 21:01:01.667:644) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:01:01.670:645) : pid=147166 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:01:01.670:646) : pid=147166 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 21:01:01.671:647) : pid=147166 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=56 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:01:01.671:647) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:01:01.671:647) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=147166 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=56 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 21:01:01.671:648) : pid=147166 uid=root auid=root ses=56 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 21:01:01.682:649) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:01:01.682:649) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffa9ba4660 a2=0x78 a3=0x7fffa9ba4660 items=0 ppid=1 pid=147166 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=56 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:01:01.682:649) : prog-id=76 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:01:01.682:650) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:01:01.682:650) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffa9ba4720 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=147166 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=56 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:01:01.682:650) : prog-id=76 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:01:01.682:651) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:01:01.682:651) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffa9ba4730 a2=0x78 a3=0x7fffa9ba4730 items=0 ppid=1 pid=147166 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=56 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:01:01.682:651) : prog-id=77 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:01:01.682:652) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:01:01.682:652) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffa9ba4730 a2=0x78 a3=0x7fffa9ba4730 items=0 ppid=1 pid=147166 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=56 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:01:01.682:652) : prog-id=77 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 21:01:01.731:653) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 21:01:01.734:654) : pid=147163 uid=root auid=root ses=55 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:01:01.736:655) : pid=147176 uid=root auid=root ses=55 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 21:01:01.738:656) : pid=147163 uid=root auid=root ses=55 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:01:11.853:657) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:01:11.863:658) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 21:10:01.057:659) : pid=153382 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:10:01.058:660) : pid=153382 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 21:10:01.058:661) : pid=153382 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=57 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:10:01.058:661) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 21:10:01.058:661) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=153382 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=57 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 21:10:01.081:662) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:10:01.085:663) : pid=153385 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:10:01.085:664) : pid=153385 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 21:10:01.085:665) : pid=153385 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=58 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:10:01.085:665) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:10:01.085:665) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=153385 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=58 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 21:10:01.086:666) : pid=153385 uid=root auid=root ses=58 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 21:10:01.090:667) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:10:01.090:667) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcb0961a80 a2=0x78 a3=0x7ffcb0961a80 items=0 ppid=1 pid=153385 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=58 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:10:01.090:667) : prog-id=78 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:10:01.090:668) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:10:01.090:668) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcb0961b40 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=153385 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=58 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:10:01.090:668) : prog-id=78 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:10:01.090:669) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:10:01.090:669) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcb0961b50 a2=0x78 a3=0x7ffcb0961b50 items=0 ppid=1 pid=153385 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=58 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:10:01.090:669) : prog-id=79 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:10:01.090:670) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:10:01.090:670) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcb0961b50 a2=0x78 a3=0x7ffcb0961b50 items=0 ppid=1 pid=153385 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=58 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:10:01.090:670) : prog-id=79 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 21:10:01.152:671) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 21:10:01.155:672) : pid=153382 uid=root auid=root ses=57 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:10:01.156:673) : pid=153394 uid=root auid=root ses=57 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 21:10:01.158:674) : pid=153382 uid=root auid=root ses=57 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 21:10:11.356:675) : pid=153387 uid=root auid=root ses=58 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:10:11.356:676) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:10:11.368:677) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 21:20:01.521:678) : pid=160024 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:20:01.522:679) : pid=160024 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 21:20:01.522:680) : pid=160024 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=59 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:20:01.522:680) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 21:20:01.522:680) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=160024 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=59 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 21:20:01.543:681) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:20:01.549:682) : pid=160027 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:20:01.549:683) : pid=160027 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 21:20:01.550:684) : pid=160027 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=60 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:20:01.550:684) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:20:01.550:684) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=160027 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=60 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 21:20:01.552:685) : pid=160027 uid=root auid=root ses=60 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 21:20:01.557:686) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:20:01.557:686) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe2caf25a0 a2=0x78 a3=0x7ffe2caf25a0 items=0 ppid=1 pid=160027 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=60 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:20:01.557:686) : prog-id=80 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:20:01.557:687) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:20:01.557:687) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe2caf2660 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=160027 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=60 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:20:01.557:687) : prog-id=80 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:20:01.557:688) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:20:01.557:688) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe2caf2670 a2=0x78 a3=0x7ffe2caf2670 items=0 ppid=1 pid=160027 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=60 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:20:01.557:688) : prog-id=81 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:20:01.557:689) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:20:01.557:689) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe2caf2670 a2=0x78 a3=0x7ffe2caf2670 items=0 ppid=1 pid=160027 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=60 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:20:01.557:689) : prog-id=81 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 21:20:01.607:690) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 21:20:01.612:691) : pid=160024 uid=root auid=root ses=59 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:20:01.613:692) : pid=160036 uid=root auid=root ses=59 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 21:20:01.615:693) : pid=160024 uid=root auid=root ses=59 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 21:20:11.856:694) : pid=160029 uid=root auid=root ses=60 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:20:11.856:695) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:20:11.872:696) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 21:30:01.972:697) : pid=167037 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:30:01.973:698) : pid=167037 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 21:30:01.973:699) : pid=167037 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=61 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:30:01.973:699) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 21:30:01.973:699) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=167037 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=61 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 21:30:01.993:700) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:30:01.998:701) : pid=167040 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:30:01.998:702) : pid=167040 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 21:30:01.999:703) : pid=167040 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=62 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:30:01.999:703) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:30:01.999:703) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=167040 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=62 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 21:30:02.000:704) : pid=167040 uid=root auid=root ses=62 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 21:30:02.004:705) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:30:02.004:705) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe6f703b40 a2=0x78 a3=0x7ffe6f703b40 items=0 ppid=1 pid=167040 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=62 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:30:02.004:705) : prog-id=82 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:30:02.004:706) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:30:02.004:706) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe6f703c00 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=167040 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=62 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:30:02.004:706) : prog-id=82 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:30:02.004:707) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:30:02.004:707) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe6f703c10 a2=0x78 a3=0x7ffe6f703c10 items=0 ppid=1 pid=167040 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=62 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:30:02.004:707) : prog-id=83 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:30:02.004:708) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:30:02.004:708) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe6f703c10 a2=0x78 a3=0x7ffe6f703c10 items=0 ppid=1 pid=167040 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=62 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:30:02.004:708) : prog-id=83 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 21:30:02.051:709) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 21:30:02.056:710) : pid=167037 uid=root auid=root ses=61 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:30:02.056:711) : pid=167049 uid=root auid=root ses=61 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 21:30:02.058:712) : pid=167037 uid=root auid=root ses=61 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 21:30:12.104:713) : pid=167042 uid=root auid=root ses=62 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:30:12.105:714) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:30:12.121:715) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 21:40:01.466:716) : pid=173788 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:40:01.467:717) : pid=173788 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 21:40:01.467:718) : pid=173788 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=63 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:40:01.467:718) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 21:40:01.467:718) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=173788 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=63 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 21:40:01.489:719) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:40:01.493:720) : pid=173791 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:40:01.493:721) : pid=173791 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 21:40:01.493:722) : pid=173791 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=64 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:40:01.493:722) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:40:01.493:722) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=173791 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=64 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 21:40:01.495:723) : pid=173791 uid=root auid=root ses=64 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 21:40:01.501:724) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:40:01.501:724) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc16f43870 a2=0x78 a3=0x7ffc16f43870 items=0 ppid=1 pid=173791 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=64 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:40:01.501:724) : prog-id=84 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:40:01.501:725) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:40:01.501:725) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc16f43930 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=173791 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=64 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:40:01.501:725) : prog-id=84 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:40:01.501:726) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:40:01.501:726) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc16f43940 a2=0x78 a3=0x7ffc16f43940 items=0 ppid=1 pid=173791 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=64 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:40:01.501:726) : prog-id=85 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:40:01.501:727) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:40:01.501:727) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc16f43940 a2=0x78 a3=0x7ffc16f43940 items=0 ppid=1 pid=173791 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=64 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:40:01.501:727) : prog-id=85 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 21:40:01.550:728) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 21:40:01.553:729) : pid=173788 uid=root auid=root ses=63 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:40:01.554:730) : pid=173800 uid=root auid=root ses=63 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 21:40:01.555:731) : pid=173788 uid=root auid=root ses=63 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 21:40:11.603:732) : pid=173793 uid=root auid=root ses=64 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:40:11.603:733) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:40:11.614:734) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 21:50:01.918:735) : pid=180794 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:50:01.919:736) : pid=180794 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 21:50:01.920:737) : pid=180794 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=65 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:50:01.920:737) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 21:50:01.920:737) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=180794 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=65 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 21:50:01.950:738) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 21:50:01.956:739) : pid=180797 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:50:01.956:740) : pid=180797 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 21:50:01.957:741) : pid=180797 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=66 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 21:50:01.957:741) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:50:01.957:741) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=180797 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=66 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 21:50:01.959:742) : pid=180797 uid=root auid=root ses=66 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 21:50:01.977:743) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:50:01.977:743) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe7fb9a420 a2=0x78 a3=0x7ffe7fb9a420 items=0 ppid=1 pid=180797 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=66 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:50:01.977:743) : prog-id=86 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:50:01.977:744) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:50:01.977:744) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe7fb9a4e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=180797 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=66 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:50:01.977:744) : prog-id=86 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:50:01.977:745) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:50:01.977:745) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe7fb9a4f0 a2=0x78 a3=0x7ffe7fb9a4f0 items=0 ppid=1 pid=180797 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=66 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:50:01.977:745) : prog-id=87 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 21:50:01.977:746) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 21:50:01.977:746) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe7fb9a4f0 a2=0x78 a3=0x7ffe7fb9a4f0 items=0 ppid=1 pid=180797 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=66 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 21:50:01.977:746) : prog-id=87 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 21:50:02.030:747) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 21:50:02.033:748) : pid=180794 uid=root auid=root ses=65 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 21:50:02.034:749) : pid=180806 uid=root auid=root ses=65 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 21:50:02.036:750) : pid=180794 uid=root auid=root ses=65 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 21:50:12.107:751) : pid=180799 uid=root auid=root ses=66 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:50:12.108:752) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 21:50:12.125:753) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 22:00:01.353:754) : pid=187703 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:00:01.354:755) : pid=187703 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 22:00:01.354:756) : pid=187703 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=67 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:00:01.354:756) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 22:00:01.354:756) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=187703 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=67 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 22:00:01.383:757) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:00:01.386:758) : pid=187706 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:00:01.386:759) : pid=187706 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 22:00:01.387:760) : pid=187706 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=68 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:00:01.387:760) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:00:01.387:760) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=187706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=68 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 22:00:01.388:761) : pid=187706 uid=root auid=root ses=68 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 22:00:01.390:762) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:00:01.390:762) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc720c1150 a2=0x78 a3=0x7ffc720c1150 items=0 ppid=1 pid=187706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=68 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:00:01.390:762) : prog-id=88 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:00:01.390:763) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:00:01.390:763) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc720c1210 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=187706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=68 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:00:01.390:763) : prog-id=88 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:00:01.391:764) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:00:01.391:764) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc720c1220 a2=0x78 a3=0x7ffc720c1220 items=0 ppid=1 pid=187706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=68 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:00:01.391:764) : prog-id=89 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:00:01.391:765) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:00:01.391:765) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc720c1220 a2=0x78 a3=0x7ffc720c1220 items=0 ppid=1 pid=187706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=68 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:00:01.391:765) : prog-id=89 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 22:00:01.449:766) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 22:00:01.452:767) : pid=187703 uid=root auid=root ses=67 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:00:01.452:768) : pid=187715 uid=root auid=root ses=67 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 22:00:01.454:769) : pid=187703 uid=root auid=root ses=67 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 22:00:11.607:770) : pid=187708 uid=root auid=root ses=68 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:00:11.607:771) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:00:11.619:772) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 22:01:01.309:773) : pid=188349 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:01:01.310:774) : pid=188349 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 22:01:01.310:775) : pid=188349 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=69 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:01:01.310:775) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 22:01:01.310:775) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=188349 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=69 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 22:01:01.328:776) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:01:01.331:777) : pid=188352 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:01:01.331:778) : pid=188352 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 22:01:01.331:779) : pid=188352 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=70 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:01:01.331:779) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:01:01.331:779) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=188352 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=70 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 22:01:01.332:780) : pid=188352 uid=root auid=root ses=70 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 22:01:01.335:781) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:01:01.335:781) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffffa33a0c0 a2=0x78 a3=0x7ffffa33a0c0 items=0 ppid=1 pid=188352 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=70 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:01:01.335:781) : prog-id=90 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:01:01.335:782) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:01:01.335:782) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffffa33a180 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=188352 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=70 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:01:01.335:782) : prog-id=90 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:01:01.335:783) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:01:01.335:783) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffffa33a190 a2=0x78 a3=0x7ffffa33a190 items=0 ppid=1 pid=188352 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=70 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:01:01.335:783) : prog-id=91 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:01:01.335:784) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:01:01.335:784) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffffa33a190 a2=0x78 a3=0x7ffffa33a190 items=0 ppid=1 pid=188352 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=70 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:01:01.335:784) : prog-id=91 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 22:01:01.381:785) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 22:01:01.384:786) : pid=188349 uid=root auid=root ses=69 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:01:01.385:787) : pid=188361 uid=root auid=root ses=69 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 22:01:01.387:788) : pid=188349 uid=root auid=root ses=69 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 22:01:11.601:789) : pid=188354 uid=root auid=root ses=70 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:01:11.601:790) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:01:11.610:791) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 22:10:01.757:792) : pid=194703 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:10:01.758:793) : pid=194703 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 22:10:01.758:794) : pid=194703 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=71 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:10:01.758:794) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 22:10:01.758:794) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=194703 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=71 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 22:10:01.776:795) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:10:01.780:796) : pid=194706 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:10:01.780:797) : pid=194706 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 22:10:01.780:798) : pid=194706 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=72 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:10:01.780:798) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:10:01.780:798) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=194706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=72 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 22:10:01.781:799) : pid=194706 uid=root auid=root ses=72 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 22:10:01.784:800) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:10:01.784:800) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcc7867240 a2=0x78 a3=0x7ffcc7867240 items=0 ppid=1 pid=194706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=72 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:10:01.784:800) : prog-id=92 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:10:01.784:801) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:10:01.784:801) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcc7867300 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=194706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=72 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:10:01.784:801) : prog-id=92 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:10:01.784:802) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:10:01.784:802) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcc7867310 a2=0x78 a3=0x7ffcc7867310 items=0 ppid=1 pid=194706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=72 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:10:01.784:802) : prog-id=93 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:10:01.784:803) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:10:01.784:803) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcc7867310 a2=0x78 a3=0x7ffcc7867310 items=0 ppid=1 pid=194706 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=72 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:10:01.784:803) : prog-id=93 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 22:10:01.832:804) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 22:10:01.835:805) : pid=194703 uid=root auid=root ses=71 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:10:01.835:806) : pid=194715 uid=root auid=root ses=71 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 22:10:01.837:807) : pid=194703 uid=root auid=root ses=71 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 22:10:11.856:808) : pid=194708 uid=root auid=root ses=72 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:10:11.857:809) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:10:11.872:810) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 22:20:01.254:811) : pid=201421 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:20:01.254:812) : pid=201421 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 22:20:01.255:813) : pid=201421 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=73 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:20:01.255:813) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 22:20:01.255:813) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=201421 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=73 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 22:20:01.280:814) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:20:01.284:815) : pid=201424 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:20:01.284:816) : pid=201424 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 22:20:01.284:817) : pid=201424 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=74 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:20:01.284:817) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:20:01.284:817) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=201424 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=74 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 22:20:01.285:818) : pid=201424 uid=root auid=root ses=74 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 22:20:01.289:819) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:20:01.289:819) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffddd177f00 a2=0x78 a3=0x7ffddd177f00 items=0 ppid=1 pid=201424 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=74 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:20:01.289:819) : prog-id=94 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:20:01.289:820) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:20:01.289:820) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffddd177fc0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=201424 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=74 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:20:01.289:820) : prog-id=94 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:20:01.289:821) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:20:01.289:821) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffddd177fd0 a2=0x78 a3=0x7ffddd177fd0 items=0 ppid=1 pid=201424 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=74 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:20:01.289:821) : prog-id=95 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:20:01.289:822) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:20:01.289:822) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffddd177fd0 a2=0x78 a3=0x7ffddd177fd0 items=0 ppid=1 pid=201424 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=74 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:20:01.289:822) : prog-id=95 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 22:20:01.342:823) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 22:20:01.353:824) : pid=201421 uid=root auid=root ses=73 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:20:01.353:825) : pid=201433 uid=root auid=root ses=73 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 22:20:01.355:826) : pid=201421 uid=root auid=root ses=73 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 22:20:11.603:827) : pid=201426 uid=root auid=root ses=74 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:20:11.604:828) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:20:11.616:829) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 22:30:01.719:830) : pid=208348 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:30:01.719:831) : pid=208348 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 22:30:01.719:832) : pid=208348 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=75 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:30:01.719:832) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 22:30:01.719:832) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=208348 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=75 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 22:30:01.742:833) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:30:01.746:834) : pid=208351 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:30:01.746:835) : pid=208351 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 22:30:01.746:836) : pid=208351 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=76 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:30:01.746:836) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:30:01.746:836) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=208351 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=76 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 22:30:01.746:837) : pid=208351 uid=root auid=root ses=76 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 22:30:01.761:838) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:30:01.761:838) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff76413680 a2=0x78 a3=0x7fff76413680 items=0 ppid=1 pid=208351 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=76 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:30:01.761:838) : prog-id=96 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:30:01.761:839) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:30:01.761:839) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff76413740 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=208351 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=76 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:30:01.761:839) : prog-id=96 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:30:01.761:840) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:30:01.761:840) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff76413750 a2=0x78 a3=0x7fff76413750 items=0 ppid=1 pid=208351 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=76 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:30:01.761:840) : prog-id=97 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:30:01.761:841) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:30:01.761:841) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff76413750 a2=0x78 a3=0x7fff76413750 items=0 ppid=1 pid=208351 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=76 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:30:01.761:841) : prog-id=97 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 22:30:01.808:842) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 22:30:01.812:843) : pid=208348 uid=root auid=root ses=75 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:30:01.814:844) : pid=208361 uid=root auid=root ses=75 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 22:30:01.816:845) : pid=208348 uid=root auid=root ses=75 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:30:11.855:846) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:30:11.876:847) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 22:40:01.168:848) : pid=215055 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:40:01.168:849) : pid=215055 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 22:40:01.169:850) : pid=215055 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=77 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:40:01.169:850) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 22:40:01.169:850) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=215055 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=77 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 22:40:01.189:851) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:40:01.191:852) : pid=215058 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:40:01.191:853) : pid=215058 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 22:40:01.192:854) : pid=215058 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=78 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:40:01.192:854) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:40:01.192:854) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=215058 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=78 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 22:40:01.192:855) : pid=215058 uid=root auid=root ses=78 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 22:40:01.195:856) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:40:01.195:856) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc56306d40 a2=0x78 a3=0x7ffc56306d40 items=0 ppid=1 pid=215058 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=78 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:40:01.195:856) : prog-id=98 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:40:01.195:857) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:40:01.195:857) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc56306e00 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=215058 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=78 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:40:01.195:857) : prog-id=98 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:40:01.195:858) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:40:01.195:858) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc56306e10 a2=0x78 a3=0x7ffc56306e10 items=0 ppid=1 pid=215058 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=78 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:40:01.195:858) : prog-id=99 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:40:01.196:859) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:40:01.196:859) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc56306e10 a2=0x78 a3=0x7ffc56306e10 items=0 ppid=1 pid=215058 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=78 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:40:01.196:859) : prog-id=99 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 22:40:01.242:860) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 22:40:01.245:861) : pid=215055 uid=root auid=root ses=77 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:40:01.245:862) : pid=215067 uid=root auid=root ses=77 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 22:40:01.248:863) : pid=215055 uid=root auid=root ses=77 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 22:40:11.355:864) : pid=215060 uid=root auid=root ses=78 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:40:11.356:865) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:40:11.366:866) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 22:50:01.659:867) : pid=221988 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:50:01.659:868) : pid=221988 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 22:50:01.659:869) : pid=221988 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=79 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:50:01.659:869) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 22:50:01.659:869) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=221988 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=79 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 22:50:01.685:870) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 22:50:01.688:871) : pid=221991 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:50:01.688:872) : pid=221991 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 22:50:01.688:873) : pid=221991 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=80 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 22:50:01.688:873) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:50:01.688:873) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=221991 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=80 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 22:50:01.689:874) : pid=221991 uid=root auid=root ses=80 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 22:50:01.706:875) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:50:01.706:875) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc04273760 a2=0x78 a3=0x7ffc04273760 items=0 ppid=1 pid=221991 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=80 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:50:01.706:875) : prog-id=100 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:50:01.706:876) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:50:01.706:876) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc04273820 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=221991 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=80 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:50:01.706:876) : prog-id=100 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:50:01.706:877) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:50:01.706:877) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc04273830 a2=0x78 a3=0x7ffc04273830 items=0 ppid=1 pid=221991 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=80 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:50:01.706:877) : prog-id=101 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 22:50:01.706:878) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 22:50:01.706:878) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc04273830 a2=0x78 a3=0x7ffc04273830 items=0 ppid=1 pid=221991 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=80 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 22:50:01.706:878) : prog-id=101 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 22:50:01.751:879) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 22:50:01.753:880) : pid=221988 uid=root auid=root ses=79 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 22:50:01.755:881) : pid=222000 uid=root auid=root ses=79 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 22:50:01.756:882) : pid=221988 uid=root auid=root ses=79 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 22:50:11.854:883) : pid=221993 uid=root auid=root ses=80 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:50:11.854:884) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 22:50:11.876:885) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 23:00:01.124:886) : pid=229008 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:00:01.124:887) : pid=229008 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 23:00:01.124:888) : pid=229008 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=81 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:00:01.124:888) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 23:00:01.124:888) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=229008 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=81 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 23:00:01.144:889) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:00:01.147:890) : pid=229011 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:00:01.148:891) : pid=229011 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 23:00:01.148:892) : pid=229011 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=82 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:00:01.148:892) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:00:01.148:892) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=229011 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=82 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 23:00:01.149:893) : pid=229011 uid=root auid=root ses=82 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 23:00:01.160:894) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:00:01.160:894) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc46a63150 a2=0x78 a3=0x7ffc46a63150 items=0 ppid=1 pid=229011 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=82 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:00:01.160:894) : prog-id=102 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:00:01.160:895) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:00:01.160:895) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc46a63210 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=229011 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=82 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:00:01.160:895) : prog-id=102 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:00:01.160:896) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:00:01.160:896) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc46a63220 a2=0x78 a3=0x7ffc46a63220 items=0 ppid=1 pid=229011 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=82 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:00:01.160:896) : prog-id=103 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:00:01.160:897) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:00:01.160:897) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc46a63220 a2=0x78 a3=0x7ffc46a63220 items=0 ppid=1 pid=229011 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=82 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:00:01.160:897) : prog-id=103 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 23:00:01.209:898) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 23:00:01.214:899) : pid=229008 uid=root auid=root ses=81 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:00:01.214:900) : pid=229020 uid=root auid=root ses=81 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 23:00:01.216:901) : pid=229008 uid=root auid=root ses=81 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:00:11.352:902) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:00:11.367:903) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 23:01:01.084:904) : pid=229701 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:01:01.085:905) : pid=229701 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 23:01:01.085:906) : pid=229701 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=83 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:01:01.085:906) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 23:01:01.085:906) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=229701 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=83 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 23:01:01.106:907) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:01:01.110:908) : pid=229705 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:01:01.111:909) : pid=229705 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 23:01:01.111:910) : pid=229705 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=84 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:01:01.111:910) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:01:01.111:910) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=229705 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=84 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 23:01:01.112:911) : pid=229705 uid=root auid=root ses=84 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 23:01:01.130:912) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:01:01.130:912) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffed8bbb940 a2=0x78 a3=0x7ffed8bbb940 items=0 ppid=1 pid=229705 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=84 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:01:01.130:912) : prog-id=104 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:01:01.130:913) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:01:01.130:913) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffed8bbba00 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=229705 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=84 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:01:01.130:913) : prog-id=104 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:01:01.130:914) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:01:01.130:914) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffed8bbba10 a2=0x78 a3=0x7ffed8bbba10 items=0 ppid=1 pid=229705 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=84 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:01:01.130:914) : prog-id=105 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:01:01.130:915) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:01:01.130:915) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffed8bbba10 a2=0x78 a3=0x7ffed8bbba10 items=0 ppid=1 pid=229705 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=84 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:01:01.130:915) : prog-id=105 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 23:01:01.173:916) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 23:01:01.176:917) : pid=229701 uid=root auid=root ses=83 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:01:01.176:918) : pid=229715 uid=root auid=root ses=83 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 23:01:01.179:919) : pid=229701 uid=root auid=root ses=83 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:01:11.357:920) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:01:11.373:921) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 23:10:01.505:922) : pid=235886 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:10:01.506:923) : pid=235886 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 23:10:01.506:924) : pid=235886 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=85 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:10:01.506:924) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 23:10:01.506:924) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=235886 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=85 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 23:10:01.523:925) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:10:01.526:926) : pid=235889 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:10:01.526:927) : pid=235889 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 23:10:01.527:928) : pid=235889 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=86 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:10:01.527:928) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:10:01.527:928) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=235889 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=86 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 23:10:01.528:929) : pid=235889 uid=root auid=root ses=86 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 23:10:01.531:930) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:10:01.531:930) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc6fde19b0 a2=0x78 a3=0x7ffc6fde19b0 items=0 ppid=1 pid=235889 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=86 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:10:01.531:930) : prog-id=106 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:10:01.531:931) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:10:01.531:931) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc6fde1a70 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=235889 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=86 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:10:01.531:931) : prog-id=106 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:10:01.531:932) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:10:01.531:932) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc6fde1a80 a2=0x78 a3=0x7ffc6fde1a80 items=0 ppid=1 pid=235889 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=86 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:10:01.531:932) : prog-id=107 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:10:01.531:933) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:10:01.531:933) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc6fde1a80 a2=0x78 a3=0x7ffc6fde1a80 items=0 ppid=1 pid=235889 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=86 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:10:01.531:933) : prog-id=107 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 23:10:01.572:934) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 23:10:01.574:935) : pid=235886 uid=root auid=root ses=85 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:10:01.575:936) : pid=235898 uid=root auid=root ses=85 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 23:10:01.576:937) : pid=235886 uid=root auid=root ses=85 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:10:11.602:938) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:10:11.624:939) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 23:20:02.024:940) : pid=242279 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:20:02.025:941) : pid=242279 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 23:20:02.025:942) : pid=242279 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=87 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:20:02.025:942) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 23:20:02.025:942) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=242279 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=87 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 23:20:02.050:943) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:20:02.056:944) : pid=242282 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:20:02.056:945) : pid=242282 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 23:20:02.057:946) : pid=242282 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=88 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:20:02.057:946) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:20:02.057:946) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=242282 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=88 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 23:20:02.059:947) : pid=242282 uid=root auid=root ses=88 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 23:20:02.068:948) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:20:02.068:948) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff2a633680 a2=0x78 a3=0x7fff2a633680 items=0 ppid=1 pid=242282 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=88 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:20:02.068:948) : prog-id=108 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:20:02.068:949) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:20:02.068:949) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff2a633740 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=242282 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=88 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:20:02.068:949) : prog-id=108 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:20:02.068:950) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:20:02.068:950) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff2a633750 a2=0x78 a3=0x7fff2a633750 items=0 ppid=1 pid=242282 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=88 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:20:02.068:950) : prog-id=109 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:20:02.068:951) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:20:02.068:951) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff2a633750 a2=0x78 a3=0x7fff2a633750 items=0 ppid=1 pid=242282 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=88 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:20:02.068:951) : prog-id=109 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 23:20:02.133:952) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 23:20:02.139:953) : pid=242279 uid=root auid=root ses=87 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:20:02.140:954) : pid=242291 uid=root auid=root ses=87 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 23:20:02.143:955) : pid=242279 uid=root auid=root ses=87 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 23:20:12.350:956) : pid=242284 uid=root auid=root ses=88 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:20:12.351:957) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:20:12.368:958) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 23:30:01.474:959) : pid=248933 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:30:01.475:960) : pid=248933 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 23:30:01.475:961) : pid=248933 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=89 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:30:01.475:961) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 23:30:01.475:961) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=248933 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=89 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 23:30:01.491:962) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:30:01.495:963) : pid=248936 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:30:01.495:964) : pid=248936 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 23:30:01.496:965) : pid=248936 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=90 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:30:01.496:965) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:30:01.496:965) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=248936 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=90 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 23:30:01.498:966) : pid=248936 uid=root auid=root ses=90 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 23:30:01.510:967) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:30:01.510:967) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffc6436b60 a2=0x78 a3=0x7fffc6436b60 items=0 ppid=1 pid=248936 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=90 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:30:01.510:967) : prog-id=110 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:30:01.510:968) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:30:01.510:968) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffc6436c20 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=248936 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=90 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:30:01.510:968) : prog-id=110 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:30:01.510:969) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:30:01.510:969) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffc6436c30 a2=0x78 a3=0x7fffc6436c30 items=0 ppid=1 pid=248936 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=90 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:30:01.510:969) : prog-id=111 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:30:01.510:970) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:30:01.510:970) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffc6436c30 a2=0x78 a3=0x7fffc6436c30 items=0 ppid=1 pid=248936 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=90 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:30:01.510:970) : prog-id=111 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 23:30:01.560:971) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 23:30:01.564:972) : pid=248933 uid=root auid=root ses=89 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:30:01.564:973) : pid=248945 uid=root auid=root ses=89 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 23:30:01.566:974) : pid=248933 uid=root auid=root ses=89 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 23:30:11.606:975) : pid=248938 uid=root auid=root ses=90 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:30:11.606:976) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:30:11.623:977) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 23:40:01.965:978) : pid=252798 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:40:01.966:979) : pid=252798 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 23:40:01.966:980) : pid=252798 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=91 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:40:01.966:980) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 23:40:01.966:980) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=252798 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=91 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 23:40:01.986:981) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:40:01.990:982) : pid=252801 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:40:01.990:983) : pid=252801 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 23:40:01.991:984) : pid=252801 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=92 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:40:01.991:984) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:40:01.991:984) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=252801 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=92 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 23:40:01.992:985) : pid=252801 uid=root auid=root ses=92 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 23:40:01.997:986) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:40:01.997:986) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe16913220 a2=0x78 a3=0x7ffe16913220 items=0 ppid=1 pid=252801 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=92 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:40:01.997:986) : prog-id=112 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:40:01.997:987) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:40:01.997:987) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe169132e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=252801 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=92 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:40:01.997:987) : prog-id=112 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:40:01.997:988) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:40:01.997:988) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe169132f0 a2=0x78 a3=0x7ffe169132f0 items=0 ppid=1 pid=252801 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=92 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:40:01.997:988) : prog-id=113 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:40:01.997:989) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:40:01.997:989) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe169132f0 a2=0x78 a3=0x7ffe169132f0 items=0 ppid=1 pid=252801 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=92 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:40:01.997:989) : prog-id=113 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 23:40:02.052:990) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 23:40:02.055:991) : pid=252798 uid=root auid=root ses=91 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:40:02.056:992) : pid=252810 uid=root auid=root ses=91 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 23:40:02.058:993) : pid=252798 uid=root auid=root ses=91 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 23:40:12.104:994) : pid=252803 uid=root auid=root ses=92 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:40:12.104:995) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:40:12.118:996) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(12.03.2026 23:50:01.457:997) : pid=255645 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:50:01.458:998) : pid=255645 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(12.03.2026 23:50:01.458:999) : pid=255645 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=93 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:50:01.458:999) : proctitle=crond: job root 
type=SYSCALL msg=audit(12.03.2026 23:50:01.458:999) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=255645 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=93 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(12.03.2026 23:50:01.477:1000) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(12.03.2026 23:50:01.480:1001) : pid=255648 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:50:01.480:1002) : pid=255648 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(12.03.2026 23:50:01.480:1003) : pid=255648 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=94 res=yes 
----
type=PROCTITLE msg=audit(12.03.2026 23:50:01.480:1003) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:50:01.480:1003) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=255648 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=94 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(12.03.2026 23:50:01.482:1004) : pid=255648 uid=root auid=root ses=94 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(12.03.2026 23:50:01.497:1005) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:50:01.497:1005) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe27c17970 a2=0x78 a3=0x7ffe27c17970 items=0 ppid=1 pid=255648 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=94 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:50:01.497:1005) : prog-id=114 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:50:01.497:1006) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:50:01.497:1006) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe27c17a30 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=255648 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=94 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:50:01.497:1006) : prog-id=114 op=UNLOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:50:01.497:1007) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:50:01.497:1007) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe27c17a40 a2=0x78 a3=0x7ffe27c17a40 items=0 ppid=1 pid=255648 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=94 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:50:01.497:1007) : prog-id=115 op=LOAD 
----
type=PROCTITLE msg=audit(12.03.2026 23:50:01.497:1008) : proctitle=(systemd) 
type=SYSCALL msg=audit(12.03.2026 23:50:01.497:1008) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe27c17a40 a2=0x78 a3=0x7ffe27c17a40 items=0 ppid=1 pid=255648 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=94 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(12.03.2026 23:50:01.497:1008) : prog-id=115 op=UNLOAD 
----
type=SERVICE_START msg=audit(12.03.2026 23:50:01.555:1009) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(12.03.2026 23:50:01.558:1010) : pid=255645 uid=root auid=root ses=93 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(12.03.2026 23:50:01.558:1011) : pid=255657 uid=root auid=root ses=93 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(12.03.2026 23:50:01.560:1012) : pid=255645 uid=root auid=root ses=93 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(12.03.2026 23:50:11.607:1013) : pid=255650 uid=root auid=root ses=94 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:50:11.607:1014) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(12.03.2026 23:50:11.616:1015) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 00:00:01.911:1016) : pid=259057 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 00:00:01.911:1017) : pid=259056 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:00:01.912:1018) : pid=259057 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:00:01.912:1019) : pid=259056 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 00:00:01.912:1020) : pid=259056 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=95 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:00:01.912:1020) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 00:00:01.912:1020) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=259056 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=95 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=LOGIN msg=audit(13.03.2026 00:00:01.912:1021) : pid=259057 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=96 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:00:01.912:1021) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 00:00:01.912:1021) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=259057 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=96 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 00:00:01.938:1022) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:00:01.942:1023) : pid=259061 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:00:01.942:1024) : pid=259061 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 00:00:01.942:1025) : pid=259061 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=97 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:00:01.942:1025) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:00:01.942:1025) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=259061 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=97 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 00:00:01.943:1026) : pid=259061 uid=root auid=root ses=97 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 00:00:01.946:1027) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:00:01.946:1027) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffed9689bb0 a2=0x78 a3=0x7ffed9689bb0 items=0 ppid=1 pid=259061 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=97 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:00:01.946:1027) : prog-id=116 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:00:01.946:1028) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:00:01.946:1028) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffed9689c70 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=259061 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=97 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:00:01.946:1028) : prog-id=116 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:00:01.946:1029) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:00:01.946:1029) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffed9689c80 a2=0x78 a3=0x7ffed9689c80 items=0 ppid=1 pid=259061 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=97 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:00:01.946:1029) : prog-id=117 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:00:01.946:1030) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:00:01.946:1030) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffed9689c80 a2=0x78 a3=0x7ffed9689c80 items=0 ppid=1 pid=259061 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=97 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:00:01.946:1030) : prog-id=117 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 00:00:02.009:1031) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 00:00:02.013:1032) : pid=259056 uid=root auid=root ses=95 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:00:02.014:1033) : pid=259070 uid=root auid=root ses=95 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 00:00:02.015:1034) : pid=259057 uid=root auid=root ses=96 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:00:02.015:1035) : pid=259071 uid=root auid=root ses=96 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 00:00:02.017:1036) : pid=259057 uid=root auid=root ses=96 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 00:00:43.637:1037) : pid=259056 uid=root auid=root ses=95 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 00:00:53.854:1038) : pid=259063 uid=root auid=root ses=97 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:00:53.854:1039) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:00:53.874:1040) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 00:01:01.200:1041) : pid=259414 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:01:01.201:1042) : pid=259414 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 00:01:01.202:1043) : pid=259414 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=98 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:01:01.202:1043) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 00:01:01.202:1043) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=259414 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=98 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 00:01:01.226:1044) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:01:01.231:1045) : pid=259417 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:01:01.231:1046) : pid=259417 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 00:01:01.231:1047) : pid=259417 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=99 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:01:01.231:1047) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:01:01.231:1047) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=259417 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=99 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 00:01:01.232:1048) : pid=259417 uid=root auid=root ses=99 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 00:01:01.237:1049) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:01:01.237:1049) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffddb957da0 a2=0x78 a3=0x7ffddb957da0 items=0 ppid=1 pid=259417 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=99 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:01:01.237:1049) : prog-id=118 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:01:01.237:1050) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:01:01.237:1050) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffddb957e60 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=259417 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=99 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:01:01.237:1050) : prog-id=118 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:01:01.237:1051) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:01:01.237:1051) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffddb957e70 a2=0x78 a3=0x7ffddb957e70 items=0 ppid=1 pid=259417 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=99 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:01:01.237:1051) : prog-id=119 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:01:01.237:1052) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:01:01.237:1052) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffddb957e70 a2=0x78 a3=0x7ffddb957e70 items=0 ppid=1 pid=259417 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=99 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:01:01.237:1052) : prog-id=119 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 00:01:01.295:1053) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 00:01:01.298:1054) : pid=259414 uid=root auid=root ses=98 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:01:01.299:1055) : pid=259426 uid=root auid=root ses=98 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 00:01:01.301:1056) : pid=259414 uid=root auid=root ses=98 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 00:01:11.353:1057) : pid=259419 uid=root auid=root ses=99 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:01:11.353:1058) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:01:11.366:1059) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 00:10:01.591:1060) : pid=262467 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:10:01.593:1061) : pid=262467 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 00:10:01.593:1062) : pid=262467 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=100 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:10:01.593:1062) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 00:10:01.593:1062) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=262467 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=100 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 00:10:01.617:1063) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:10:01.622:1064) : pid=262470 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:10:01.622:1065) : pid=262470 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 00:10:01.622:1066) : pid=262470 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=101 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:10:01.622:1066) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:10:01.622:1066) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=262470 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=101 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 00:10:01.623:1067) : pid=262470 uid=root auid=root ses=101 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 00:10:01.628:1068) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:10:01.628:1068) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd9ff81ad0 a2=0x78 a3=0x7ffd9ff81ad0 items=0 ppid=1 pid=262470 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=101 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:10:01.628:1068) : prog-id=120 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:10:01.628:1069) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:10:01.628:1069) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd9ff81b90 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=262470 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=101 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:10:01.628:1069) : prog-id=120 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:10:01.628:1070) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:10:01.628:1070) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd9ff81ba0 a2=0x78 a3=0x7ffd9ff81ba0 items=0 ppid=1 pid=262470 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=101 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:10:01.628:1070) : prog-id=121 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:10:01.628:1071) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:10:01.628:1071) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd9ff81ba0 a2=0x78 a3=0x7ffd9ff81ba0 items=0 ppid=1 pid=262470 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=101 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:10:01.628:1071) : prog-id=121 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 00:10:01.690:1072) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 00:10:01.703:1073) : pid=262467 uid=root auid=root ses=100 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:10:01.704:1074) : pid=262480 uid=root auid=root ses=100 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 00:10:01.706:1075) : pid=262467 uid=root auid=root ses=100 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 00:10:11.855:1076) : pid=262472 uid=root auid=root ses=101 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:10:11.856:1077) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:10:11.868:1078) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 00:20:02.045:1079) : pid=265734 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:20:02.046:1080) : pid=265734 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 00:20:02.046:1081) : pid=265734 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=102 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:20:02.046:1081) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 00:20:02.046:1081) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=265734 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=102 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 00:20:02.069:1082) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:20:02.074:1083) : pid=265737 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:20:02.074:1084) : pid=265737 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 00:20:02.074:1085) : pid=265737 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=103 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:20:02.074:1085) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:20:02.074:1085) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=265737 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=103 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 00:20:02.076:1086) : pid=265737 uid=root auid=root ses=103 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 00:20:02.090:1087) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:20:02.090:1087) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef79902b0 a2=0x78 a3=0x7ffef79902b0 items=0 ppid=1 pid=265737 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=103 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:20:02.090:1087) : prog-id=122 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:20:02.090:1088) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:20:02.090:1088) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef7990370 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=265737 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=103 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:20:02.090:1088) : prog-id=122 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:20:02.090:1089) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:20:02.090:1089) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef7990380 a2=0x78 a3=0x7ffef7990380 items=0 ppid=1 pid=265737 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=103 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:20:02.090:1089) : prog-id=123 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:20:02.090:1090) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:20:02.090:1090) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef7990380 a2=0x78 a3=0x7ffef7990380 items=0 ppid=1 pid=265737 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=103 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:20:02.090:1090) : prog-id=123 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 00:20:02.144:1091) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 00:20:02.146:1092) : pid=265734 uid=root auid=root ses=102 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:20:02.148:1093) : pid=265746 uid=root auid=root ses=102 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 00:20:02.150:1094) : pid=265734 uid=root auid=root ses=102 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 00:20:12.353:1095) : pid=265739 uid=root auid=root ses=103 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:20:12.353:1096) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:20:12.371:1097) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 00:30:01.523:1098) : pid=268965 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:30:01.523:1099) : pid=268965 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 00:30:01.525:1100) : pid=268965 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=104 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:30:01.525:1100) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 00:30:01.525:1100) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=268965 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=104 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 00:30:01.555:1101) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:30:01.559:1102) : pid=268970 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:30:01.559:1103) : pid=268970 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 00:30:01.561:1104) : pid=268970 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=105 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:30:01.561:1104) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:30:01.561:1104) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=268970 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=105 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 00:30:01.562:1105) : pid=268970 uid=root auid=root ses=105 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 00:30:01.582:1106) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:30:01.582:1106) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc13ebe670 a2=0x78 a3=0x7ffc13ebe670 items=0 ppid=1 pid=268970 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=105 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:30:01.582:1106) : prog-id=124 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:30:01.582:1107) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:30:01.582:1107) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc13ebe730 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=268970 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=105 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:30:01.582:1107) : prog-id=124 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:30:01.582:1108) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:30:01.582:1108) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc13ebe740 a2=0x78 a3=0x7ffc13ebe740 items=0 ppid=1 pid=268970 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=105 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:30:01.582:1108) : prog-id=125 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:30:01.582:1109) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:30:01.582:1109) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc13ebe740 a2=0x78 a3=0x7ffc13ebe740 items=0 ppid=1 pid=268970 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=105 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:30:01.582:1109) : prog-id=125 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 00:30:01.638:1110) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 00:30:01.642:1111) : pid=268965 uid=root auid=root ses=104 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:30:01.642:1112) : pid=268979 uid=root auid=root ses=104 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 00:30:01.644:1113) : pid=268965 uid=root auid=root ses=104 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 00:30:11.855:1114) : pid=268972 uid=root auid=root ses=105 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:30:11.856:1115) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:30:11.870:1116) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 00:40:01.969:1117) : pid=272331 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:40:01.971:1118) : pid=272331 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 00:40:01.971:1119) : pid=272331 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=106 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:40:01.971:1119) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 00:40:01.971:1119) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=272331 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=106 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 00:40:01.996:1120) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:40:02.000:1121) : pid=272334 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:40:02.001:1122) : pid=272334 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 00:40:02.001:1123) : pid=272334 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=107 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:40:02.001:1123) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:40:02.001:1123) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=272334 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=107 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 00:40:02.002:1124) : pid=272334 uid=root auid=root ses=107 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 00:40:02.016:1125) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:40:02.016:1125) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff79d2e610 a2=0x78 a3=0x7fff79d2e610 items=0 ppid=1 pid=272334 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=107 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:40:02.016:1125) : prog-id=126 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:40:02.017:1126) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:40:02.017:1126) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff79d2e6d0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=272334 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=107 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:40:02.017:1126) : prog-id=126 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:40:02.017:1127) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:40:02.017:1127) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff79d2e6e0 a2=0x78 a3=0x7fff79d2e6e0 items=0 ppid=1 pid=272334 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=107 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:40:02.017:1127) : prog-id=127 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:40:02.017:1128) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:40:02.017:1128) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff79d2e6e0 a2=0x78 a3=0x7fff79d2e6e0 items=0 ppid=1 pid=272334 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=107 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:40:02.017:1128) : prog-id=127 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 00:40:02.068:1129) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 00:40:02.072:1130) : pid=272331 uid=root auid=root ses=106 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:40:02.072:1131) : pid=272343 uid=root auid=root ses=106 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 00:40:02.074:1132) : pid=272331 uid=root auid=root ses=106 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 00:40:12.106:1133) : pid=272336 uid=root auid=root ses=107 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:40:12.106:1134) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:40:12.117:1135) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 00:50:01.432:1136) : pid=275607 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:50:01.433:1137) : pid=275607 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 00:50:01.433:1138) : pid=275607 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=108 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:50:01.433:1138) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 00:50:01.433:1138) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=275607 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=108 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 00:50:01.453:1139) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 00:50:01.457:1140) : pid=275610 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:50:01.457:1141) : pid=275610 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 00:50:01.457:1142) : pid=275610 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=109 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 00:50:01.457:1142) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:50:01.457:1142) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=275610 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=109 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 00:50:01.458:1143) : pid=275610 uid=root auid=root ses=109 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 00:50:01.464:1144) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:50:01.464:1144) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc8a0ad8f0 a2=0x78 a3=0x7ffc8a0ad8f0 items=0 ppid=1 pid=275610 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=109 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:50:01.464:1144) : prog-id=128 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:50:01.464:1145) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:50:01.464:1145) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc8a0ad9b0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=275610 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=109 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:50:01.464:1145) : prog-id=128 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:50:01.464:1146) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:50:01.464:1146) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc8a0ad9c0 a2=0x78 a3=0x7ffc8a0ad9c0 items=0 ppid=1 pid=275610 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=109 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:50:01.464:1146) : prog-id=129 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 00:50:01.464:1147) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 00:50:01.464:1147) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc8a0ad9c0 a2=0x78 a3=0x7ffc8a0ad9c0 items=0 ppid=1 pid=275610 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=109 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 00:50:01.464:1147) : prog-id=129 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 00:50:01.535:1148) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 00:50:01.537:1149) : pid=275607 uid=root auid=root ses=108 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 00:50:01.538:1150) : pid=275619 uid=root auid=root ses=108 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 00:50:01.539:1151) : pid=275607 uid=root auid=root ses=108 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:50:11.604:1152) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 00:50:11.623:1153) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 01:00:01.910:1154) : pid=279070 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:00:01.911:1155) : pid=279070 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 01:00:01.911:1156) : pid=279070 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=110 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:00:01.911:1156) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 01:00:01.911:1156) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=279070 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=110 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 01:00:01.942:1157) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:00:01.955:1158) : pid=279073 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:00:01.955:1159) : pid=279073 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 01:00:01.956:1160) : pid=279073 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=111 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:00:01.956:1160) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:00:01.956:1160) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=279073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=111 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 01:00:01.957:1161) : pid=279073 uid=root auid=root ses=111 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 01:00:01.960:1162) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:00:01.960:1162) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffa6987440 a2=0x78 a3=0x7fffa6987440 items=0 ppid=1 pid=279073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=111 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:00:01.960:1162) : prog-id=130 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:00:01.961:1163) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:00:01.961:1163) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffa6987500 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=279073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=111 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:00:01.961:1163) : prog-id=130 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:00:01.961:1164) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:00:01.961:1164) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffa6987510 a2=0x78 a3=0x7fffa6987510 items=0 ppid=1 pid=279073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=111 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:00:01.961:1164) : prog-id=131 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:00:01.961:1165) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:00:01.961:1165) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffa6987510 a2=0x78 a3=0x7fffa6987510 items=0 ppid=1 pid=279073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=111 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:00:01.961:1165) : prog-id=131 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 01:00:02.012:1166) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 01:00:02.015:1167) : pid=279070 uid=root auid=root ses=110 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:00:02.016:1168) : pid=279083 uid=root auid=root ses=110 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 01:00:02.018:1169) : pid=279070 uid=root auid=root ses=110 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 01:00:12.102:1170) : pid=279076 uid=root auid=root ses=111 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:00:12.102:1171) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:00:12.116:1172) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 01:01:01.860:1173) : pid=279399 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:01:01.862:1174) : pid=279399 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 01:01:01.862:1175) : pid=279399 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=112 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:01:01.862:1175) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 01:01:01.862:1175) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=279399 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=112 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 01:01:01.881:1176) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:01:01.885:1177) : pid=279403 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:01:01.885:1178) : pid=279403 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 01:01:01.885:1179) : pid=279403 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=113 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:01:01.885:1179) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:01:01.885:1179) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=279403 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=113 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 01:01:01.886:1180) : pid=279403 uid=root auid=root ses=113 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 01:01:01.900:1181) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:01:01.900:1181) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffded96cc10 a2=0x78 a3=0x7ffded96cc10 items=0 ppid=1 pid=279403 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=113 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:01:01.900:1181) : prog-id=132 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:01:01.900:1182) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:01:01.900:1182) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffded96ccd0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=279403 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=113 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:01:01.900:1182) : prog-id=132 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:01:01.900:1183) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:01:01.900:1183) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffded96cce0 a2=0x78 a3=0x7ffded96cce0 items=0 ppid=1 pid=279403 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=113 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:01:01.900:1183) : prog-id=133 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:01:01.900:1184) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:01:01.900:1184) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffded96cce0 a2=0x78 a3=0x7ffded96cce0 items=0 ppid=1 pid=279403 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=113 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:01:01.900:1184) : prog-id=133 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 01:01:01.958:1185) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 01:01:01.962:1186) : pid=279399 uid=root auid=root ses=112 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:01:01.964:1187) : pid=279413 uid=root auid=root ses=112 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 01:01:01.966:1188) : pid=279399 uid=root auid=root ses=112 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 01:01:12.106:1189) : pid=279405 uid=root auid=root ses=113 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:01:12.108:1190) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:01:12.121:1191) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 01:10:01.277:1192) : pid=282448 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:10:01.278:1193) : pid=282448 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 01:10:01.278:1194) : pid=282448 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=114 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:10:01.278:1194) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 01:10:01.278:1194) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=282448 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=114 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 01:10:01.297:1195) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:10:01.300:1196) : pid=282451 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:10:01.300:1197) : pid=282451 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 01:10:01.301:1198) : pid=282451 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=115 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:10:01.301:1198) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:10:01.301:1198) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=282451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=115 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 01:10:01.301:1199) : pid=282451 uid=root auid=root ses=115 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 01:10:01.305:1200) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:10:01.305:1200) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd0e1ea7c0 a2=0x78 a3=0x7ffd0e1ea7c0 items=0 ppid=1 pid=282451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=115 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:10:01.305:1200) : prog-id=134 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:10:01.305:1201) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:10:01.305:1201) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd0e1ea880 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=282451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=115 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:10:01.305:1201) : prog-id=134 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:10:01.305:1202) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:10:01.305:1202) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd0e1ea890 a2=0x78 a3=0x7ffd0e1ea890 items=0 ppid=1 pid=282451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=115 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:10:01.305:1202) : prog-id=135 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:10:01.305:1203) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:10:01.305:1203) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd0e1ea890 a2=0x78 a3=0x7ffd0e1ea890 items=0 ppid=1 pid=282451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=115 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:10:01.305:1203) : prog-id=135 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 01:10:01.357:1204) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 01:10:01.361:1205) : pid=282448 uid=root auid=root ses=114 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:10:01.362:1206) : pid=282461 uid=root auid=root ses=114 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 01:10:01.363:1207) : pid=282448 uid=root auid=root ses=114 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:10:11.604:1208) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:10:11.614:1209) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 01:20:01.754:1210) : pid=285509 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:20:01.755:1211) : pid=285509 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 01:20:01.755:1212) : pid=285509 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=116 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:20:01.755:1212) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 01:20:01.755:1212) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=285509 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=116 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 01:20:01.777:1213) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:20:01.782:1214) : pid=285512 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:20:01.782:1215) : pid=285512 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 01:20:01.782:1216) : pid=285512 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=117 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:20:01.782:1216) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:20:01.782:1216) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=285512 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=117 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 01:20:01.784:1217) : pid=285512 uid=root auid=root ses=117 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 01:20:01.799:1218) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:20:01.799:1218) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef6876090 a2=0x78 a3=0x7ffef6876090 items=0 ppid=1 pid=285512 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=117 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:20:01.799:1218) : prog-id=136 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:20:01.799:1219) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:20:01.799:1219) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef6876150 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=285512 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=117 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:20:01.799:1219) : prog-id=136 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:20:01.799:1220) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:20:01.799:1220) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef6876160 a2=0x78 a3=0x7ffef6876160 items=0 ppid=1 pid=285512 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=117 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:20:01.799:1220) : prog-id=137 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:20:01.799:1221) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:20:01.799:1221) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef6876160 a2=0x78 a3=0x7ffef6876160 items=0 ppid=1 pid=285512 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=117 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:20:01.799:1221) : prog-id=137 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 01:20:01.868:1222) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 01:20:01.871:1223) : pid=285509 uid=root auid=root ses=116 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:20:01.872:1224) : pid=285521 uid=root auid=root ses=116 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 01:20:01.874:1225) : pid=285509 uid=root auid=root ses=116 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 01:20:12.106:1226) : pid=285514 uid=root auid=root ses=117 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:20:12.106:1227) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:20:12.116:1228) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 01:30:01.230:1229) : pid=288789 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:30:01.230:1230) : pid=288789 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 01:30:01.231:1231) : pid=288789 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=118 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:30:01.231:1231) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 01:30:01.231:1231) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=288789 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=118 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 01:30:01.251:1232) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:30:01.254:1233) : pid=288792 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:30:01.254:1234) : pid=288792 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 01:30:01.254:1235) : pid=288792 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=119 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:30:01.254:1235) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:30:01.254:1235) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=288792 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=119 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 01:30:01.256:1236) : pid=288792 uid=root auid=root ses=119 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 01:30:01.278:1237) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:30:01.278:1237) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc54071090 a2=0x78 a3=0x7ffc54071090 items=0 ppid=1 pid=288792 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=119 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:30:01.278:1237) : prog-id=138 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:30:01.278:1238) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:30:01.278:1238) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc54071150 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=288792 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=119 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:30:01.278:1238) : prog-id=138 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:30:01.278:1239) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:30:01.278:1239) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc54071160 a2=0x78 a3=0x7ffc54071160 items=0 ppid=1 pid=288792 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=119 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:30:01.278:1239) : prog-id=139 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:30:01.278:1240) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:30:01.278:1240) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc54071160 a2=0x78 a3=0x7ffc54071160 items=0 ppid=1 pid=288792 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=119 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:30:01.278:1240) : prog-id=139 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 01:30:01.330:1241) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 01:30:01.334:1242) : pid=288789 uid=root auid=root ses=118 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:30:01.334:1243) : pid=288801 uid=root auid=root ses=118 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 01:30:01.336:1244) : pid=288789 uid=root auid=root ses=118 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 01:30:11.351:1245) : pid=288794 uid=root auid=root ses=119 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:30:11.352:1246) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:30:11.375:1247) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 01:40:01.692:1248) : pid=292236 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:40:01.693:1249) : pid=292236 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 01:40:01.693:1250) : pid=292236 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=120 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:40:01.693:1250) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 01:40:01.693:1250) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=292236 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=120 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 01:40:01.712:1251) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:40:01.716:1252) : pid=292239 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:40:01.716:1253) : pid=292239 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 01:40:01.716:1254) : pid=292239 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=121 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:40:01.716:1254) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:40:01.716:1254) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=292239 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=121 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 01:40:01.717:1255) : pid=292239 uid=root auid=root ses=121 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 01:40:01.722:1256) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:40:01.722:1256) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffa9e2b840 a2=0x78 a3=0x7fffa9e2b840 items=0 ppid=1 pid=292239 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=121 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:40:01.722:1256) : prog-id=140 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:40:01.722:1257) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:40:01.722:1257) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffa9e2b900 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=292239 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=121 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:40:01.722:1257) : prog-id=140 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:40:01.723:1258) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:40:01.723:1258) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffa9e2b910 a2=0x78 a3=0x7fffa9e2b910 items=0 ppid=1 pid=292239 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=121 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:40:01.723:1258) : prog-id=141 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:40:01.723:1259) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:40:01.723:1259) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffa9e2b910 a2=0x78 a3=0x7fffa9e2b910 items=0 ppid=1 pid=292239 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=121 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:40:01.723:1259) : prog-id=141 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 01:40:01.779:1260) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 01:40:01.782:1261) : pid=292236 uid=root auid=root ses=120 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:40:01.783:1262) : pid=292248 uid=root auid=root ses=120 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 01:40:01.785:1263) : pid=292236 uid=root auid=root ses=120 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 01:40:11.855:1264) : pid=292241 uid=root auid=root ses=121 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:40:11.855:1265) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:40:11.866:1266) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 01:50:01.182:1267) : pid=295603 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:50:01.184:1268) : pid=295603 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 01:50:01.184:1269) : pid=295603 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=122 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:50:01.184:1269) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 01:50:01.184:1269) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=295603 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=122 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 01:50:01.210:1270) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 01:50:01.215:1271) : pid=295606 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:50:01.215:1272) : pid=295606 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 01:50:01.215:1273) : pid=295606 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=123 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 01:50:01.215:1273) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:50:01.215:1273) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=295606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=123 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 01:50:01.216:1274) : pid=295606 uid=root auid=root ses=123 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 01:50:01.221:1275) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:50:01.221:1275) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd02daf650 a2=0x78 a3=0x7ffd02daf650 items=0 ppid=1 pid=295606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=123 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:50:01.221:1275) : prog-id=142 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:50:01.222:1276) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:50:01.222:1276) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd02daf710 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=295606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=123 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:50:01.222:1276) : prog-id=142 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:50:01.222:1277) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:50:01.222:1277) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd02daf720 a2=0x78 a3=0x7ffd02daf720 items=0 ppid=1 pid=295606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=123 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:50:01.222:1277) : prog-id=143 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 01:50:01.222:1278) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 01:50:01.222:1278) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd02daf720 a2=0x78 a3=0x7ffd02daf720 items=0 ppid=1 pid=295606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=123 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 01:50:01.222:1278) : prog-id=143 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 01:50:01.272:1279) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 01:50:01.277:1280) : pid=295603 uid=root auid=root ses=122 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 01:50:01.277:1281) : pid=295615 uid=root auid=root ses=122 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 01:50:01.279:1282) : pid=295603 uid=root auid=root ses=122 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:50:11.355:1283) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 01:50:11.372:1284) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 02:00:01.662:1285) : pid=298936 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 02:00:01.662:1286) : pid=298937 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:00:01.663:1287) : pid=298936 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 02:00:01.663:1288) : pid=298936 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=124 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:00:01.663:1288) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 02:00:01.663:1288) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=298936 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=124 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_ACCT msg=audit(13.03.2026 02:00:01.663:1289) : pid=298937 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 02:00:01.664:1290) : pid=298937 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=125 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:00:01.664:1290) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 02:00:01.664:1290) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=298937 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=125 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 02:00:01.682:1291) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:00:01.687:1292) : pid=298941 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:00:01.687:1293) : pid=298941 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 02:00:01.688:1294) : pid=298941 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=126 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:00:01.688:1294) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:00:01.688:1294) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=298941 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=126 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 02:00:01.688:1295) : pid=298941 uid=root auid=root ses=126 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 02:00:01.701:1296) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:00:01.701:1296) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9668cd20 a2=0x78 a3=0x7fff9668cd20 items=0 ppid=1 pid=298941 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=126 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:00:01.701:1296) : prog-id=144 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:00:01.701:1297) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:00:01.701:1297) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9668cde0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=298941 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=126 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:00:01.701:1297) : prog-id=144 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:00:01.701:1298) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:00:01.701:1298) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9668cdf0 a2=0x78 a3=0x7fff9668cdf0 items=0 ppid=1 pid=298941 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=126 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:00:01.701:1298) : prog-id=145 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:00:01.701:1299) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:00:01.701:1299) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9668cdf0 a2=0x78 a3=0x7fff9668cdf0 items=0 ppid=1 pid=298941 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=126 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:00:01.701:1299) : prog-id=145 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 02:00:01.758:1300) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 02:00:01.762:1301) : pid=298936 uid=root auid=root ses=124 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:00:01.762:1302) : pid=298950 uid=root auid=root ses=124 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 02:00:01.762:1303) : pid=298937 uid=root auid=root ses=125 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:00:01.764:1304) : pid=298951 uid=root auid=root ses=125 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 02:00:01.764:1305) : pid=298936 uid=root auid=root ses=124 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 02:00:01.766:1306) : pid=298937 uid=root auid=root ses=125 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 02:00:11.853:1307) : pid=298943 uid=root auid=root ses=126 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:00:11.853:1308) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:00:11.866:1309) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 02:01:01.616:1310) : pid=299226 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:01:01.617:1311) : pid=299226 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 02:01:01.617:1312) : pid=299226 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=127 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:01:01.617:1312) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 02:01:01.617:1312) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=299226 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=127 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 02:01:01.638:1313) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:01:01.645:1314) : pid=299230 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:01:01.645:1315) : pid=299230 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 02:01:01.645:1316) : pid=299230 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=128 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:01:01.645:1316) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:01:01.645:1316) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=299230 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=128 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 02:01:01.646:1317) : pid=299230 uid=root auid=root ses=128 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 02:01:01.653:1318) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:01:01.653:1318) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe768b82d0 a2=0x78 a3=0x7ffe768b82d0 items=0 ppid=1 pid=299230 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=128 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:01:01.653:1318) : prog-id=146 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:01:01.653:1319) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:01:01.653:1319) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe768b8390 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=299230 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=128 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:01:01.653:1319) : prog-id=146 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:01:01.653:1320) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:01:01.653:1320) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe768b83a0 a2=0x78 a3=0x7ffe768b83a0 items=0 ppid=1 pid=299230 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=128 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:01:01.653:1320) : prog-id=147 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:01:01.653:1321) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:01:01.653:1321) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe768b83a0 a2=0x78 a3=0x7ffe768b83a0 items=0 ppid=1 pid=299230 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=128 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:01:01.653:1321) : prog-id=147 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 02:01:01.717:1322) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 02:01:01.730:1323) : pid=299226 uid=root auid=root ses=127 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:01:01.731:1324) : pid=299239 uid=root auid=root ses=127 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 02:01:01.734:1325) : pid=299226 uid=root auid=root ses=127 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 02:01:11.855:1326) : pid=299232 uid=root auid=root ses=128 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:01:11.855:1327) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:01:11.870:1328) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 02:10:02.020:1329) : pid=302459 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:10:02.022:1330) : pid=302459 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 02:10:02.022:1331) : pid=302459 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=129 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:10:02.022:1331) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 02:10:02.022:1331) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=302459 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=129 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 02:10:02.044:1332) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:10:02.049:1333) : pid=302462 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:10:02.049:1334) : pid=302462 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 02:10:02.049:1335) : pid=302462 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=130 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:10:02.049:1335) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:10:02.049:1335) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=302462 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=130 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 02:10:02.052:1336) : pid=302462 uid=root auid=root ses=130 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 02:10:02.057:1337) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:10:02.057:1337) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff70963ce0 a2=0x78 a3=0x7fff70963ce0 items=0 ppid=1 pid=302462 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=130 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:10:02.057:1337) : prog-id=148 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:10:02.057:1338) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:10:02.057:1338) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff70963da0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=302462 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=130 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:10:02.057:1338) : prog-id=148 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:10:02.057:1339) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:10:02.057:1339) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff70963db0 a2=0x78 a3=0x7fff70963db0 items=0 ppid=1 pid=302462 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=130 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:10:02.057:1339) : prog-id=149 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:10:02.057:1340) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:10:02.057:1340) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff70963db0 a2=0x78 a3=0x7fff70963db0 items=0 ppid=1 pid=302462 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=130 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:10:02.057:1340) : prog-id=149 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 02:10:02.106:1341) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 02:10:02.109:1342) : pid=302459 uid=root auid=root ses=129 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:10:02.109:1343) : pid=302471 uid=root auid=root ses=129 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 02:10:02.111:1344) : pid=302459 uid=root auid=root ses=129 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 02:10:12.356:1345) : pid=302464 uid=root auid=root ses=130 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:10:12.357:1346) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:10:12.370:1347) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 02:20:01.512:1348) : pid=305601 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:20:01.513:1349) : pid=305601 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 02:20:01.513:1350) : pid=305601 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=131 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:20:01.513:1350) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 02:20:01.513:1350) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=305601 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=131 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 02:20:01.531:1351) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:20:01.534:1352) : pid=305604 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:20:01.534:1353) : pid=305604 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 02:20:01.536:1354) : pid=305604 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=132 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:20:01.536:1354) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:20:01.536:1354) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=305604 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=132 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 02:20:01.536:1355) : pid=305604 uid=root auid=root ses=132 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 02:20:01.559:1356) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:20:01.559:1356) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffedd854230 a2=0x78 a3=0x7ffedd854230 items=0 ppid=1 pid=305604 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=132 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:20:01.559:1356) : prog-id=150 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:20:01.559:1357) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:20:01.559:1357) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffedd8542f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=305604 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=132 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:20:01.559:1357) : prog-id=150 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:20:01.559:1358) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:20:01.559:1358) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffedd854300 a2=0x78 a3=0x7ffedd854300 items=0 ppid=1 pid=305604 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=132 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:20:01.559:1358) : prog-id=151 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:20:01.559:1359) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:20:01.559:1359) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffedd854300 a2=0x78 a3=0x7ffedd854300 items=0 ppid=1 pid=305604 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=132 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:20:01.559:1359) : prog-id=151 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 02:20:01.626:1360) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 02:20:01.631:1361) : pid=305601 uid=root auid=root ses=131 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:20:01.631:1362) : pid=305613 uid=root auid=root ses=131 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 02:20:01.634:1363) : pid=305601 uid=root auid=root ses=131 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:20:11.853:1364) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:20:11.870:1365) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 02:30:01.942:1366) : pid=308896 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:30:01.942:1367) : pid=308896 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 02:30:01.942:1368) : pid=308896 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=133 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:30:01.942:1368) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 02:30:01.942:1368) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=308896 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=133 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 02:30:01.971:1369) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:30:01.975:1370) : pid=308903 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:30:01.975:1371) : pid=308903 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 02:30:01.975:1372) : pid=308903 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=134 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:30:01.975:1372) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:30:01.975:1372) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=308903 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=134 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 02:30:01.977:1373) : pid=308903 uid=root auid=root ses=134 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 02:30:01.991:1374) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:30:01.991:1374) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff703fc370 a2=0x78 a3=0x7fff703fc370 items=0 ppid=1 pid=308903 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=134 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:30:01.991:1374) : prog-id=152 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:30:01.991:1375) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:30:01.991:1375) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff703fc430 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=308903 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=134 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:30:01.991:1375) : prog-id=152 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:30:01.991:1376) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:30:01.991:1376) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff703fc440 a2=0x78 a3=0x7fff703fc440 items=0 ppid=1 pid=308903 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=134 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:30:01.991:1376) : prog-id=153 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:30:01.991:1377) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:30:01.991:1377) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff703fc440 a2=0x78 a3=0x7fff703fc440 items=0 ppid=1 pid=308903 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=134 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:30:01.991:1377) : prog-id=153 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 02:30:02.043:1378) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 02:30:02.052:1379) : pid=308896 uid=root auid=root ses=133 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:30:02.052:1380) : pid=308912 uid=root auid=root ses=133 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 02:30:02.056:1381) : pid=308896 uid=root auid=root ses=133 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 02:30:12.109:1382) : pid=308905 uid=root auid=root ses=134 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:30:12.109:1383) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:30:12.126:1384) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 02:40:01.375:1385) : pid=312185 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:40:01.375:1386) : pid=312185 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 02:40:01.376:1387) : pid=312185 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=135 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:40:01.376:1387) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 02:40:01.376:1387) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=312185 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=135 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 02:40:01.398:1388) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:40:01.401:1389) : pid=312188 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:40:01.401:1390) : pid=312188 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 02:40:01.401:1391) : pid=312188 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=136 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:40:01.401:1391) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:40:01.401:1391) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=312188 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=136 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 02:40:01.403:1392) : pid=312188 uid=root auid=root ses=136 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 02:40:01.407:1393) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:40:01.407:1393) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc5e7635f0 a2=0x78 a3=0x7ffc5e7635f0 items=0 ppid=1 pid=312188 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=136 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:40:01.407:1393) : prog-id=154 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:40:01.407:1394) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:40:01.407:1394) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc5e7636b0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=312188 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=136 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:40:01.407:1394) : prog-id=154 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:40:01.407:1395) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:40:01.407:1395) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc5e7636c0 a2=0x78 a3=0x7ffc5e7636c0 items=0 ppid=1 pid=312188 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=136 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:40:01.407:1395) : prog-id=155 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:40:01.407:1396) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:40:01.407:1396) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc5e7636c0 a2=0x78 a3=0x7ffc5e7636c0 items=0 ppid=1 pid=312188 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=136 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:40:01.407:1396) : prog-id=155 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 02:40:01.465:1397) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 02:40:01.468:1398) : pid=312185 uid=root auid=root ses=135 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:40:01.469:1399) : pid=312197 uid=root auid=root ses=135 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 02:40:01.471:1400) : pid=312185 uid=root auid=root ses=135 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 02:40:11.607:1401) : pid=312190 uid=root auid=root ses=136 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:40:11.607:1402) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:40:11.619:1403) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 02:50:01.824:1404) : pid=315517 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:50:01.825:1405) : pid=315517 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 02:50:01.825:1406) : pid=315517 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=137 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:50:01.825:1406) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 02:50:01.825:1406) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=315517 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=137 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 02:50:01.849:1407) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 02:50:01.854:1408) : pid=315520 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:50:01.854:1409) : pid=315520 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 02:50:01.854:1410) : pid=315520 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=138 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 02:50:01.854:1410) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:50:01.854:1410) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=315520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=138 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 02:50:01.855:1411) : pid=315520 uid=root auid=root ses=138 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 02:50:01.868:1412) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:50:01.868:1412) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffee0476190 a2=0x78 a3=0x7ffee0476190 items=0 ppid=1 pid=315520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=138 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:50:01.868:1412) : prog-id=156 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:50:01.868:1413) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:50:01.868:1413) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffee0476250 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=315520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=138 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:50:01.868:1413) : prog-id=156 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:50:01.868:1414) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:50:01.868:1414) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffee0476260 a2=0x78 a3=0x7ffee0476260 items=0 ppid=1 pid=315520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=138 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:50:01.868:1414) : prog-id=157 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 02:50:01.868:1415) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 02:50:01.868:1415) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffee0476260 a2=0x78 a3=0x7ffee0476260 items=0 ppid=1 pid=315520 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=138 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 02:50:01.868:1415) : prog-id=157 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 02:50:01.916:1416) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 02:50:01.920:1417) : pid=315517 uid=root auid=root ses=137 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 02:50:01.921:1418) : pid=315529 uid=root auid=root ses=137 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 02:50:01.922:1419) : pid=315517 uid=root auid=root ses=137 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:50:12.103:1420) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 02:50:12.115:1421) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 03:00:01.304:1422) : pid=318878 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:00:01.305:1423) : pid=318878 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 03:00:01.305:1424) : pid=318878 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=139 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:00:01.305:1424) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 03:00:01.305:1424) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=318878 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=139 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 03:00:01.322:1425) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:00:01.326:1426) : pid=318881 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:00:01.326:1427) : pid=318881 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 03:00:01.326:1428) : pid=318881 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=140 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:00:01.326:1428) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:00:01.326:1428) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=318881 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=140 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 03:00:01.328:1429) : pid=318881 uid=root auid=root ses=140 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 03:00:01.333:1430) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:00:01.333:1430) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd0a19f670 a2=0x78 a3=0x7ffd0a19f670 items=0 ppid=1 pid=318881 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=140 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:00:01.333:1430) : prog-id=158 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:00:01.333:1431) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:00:01.333:1431) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd0a19f730 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=318881 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=140 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:00:01.333:1431) : prog-id=158 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:00:01.333:1432) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:00:01.333:1432) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd0a19f740 a2=0x78 a3=0x7ffd0a19f740 items=0 ppid=1 pid=318881 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=140 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:00:01.333:1432) : prog-id=159 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:00:01.333:1433) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:00:01.333:1433) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd0a19f740 a2=0x78 a3=0x7ffd0a19f740 items=0 ppid=1 pid=318881 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=140 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:00:01.333:1433) : prog-id=159 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 03:00:01.388:1434) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 03:00:01.390:1435) : pid=318878 uid=root auid=root ses=139 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:00:01.391:1436) : pid=318890 uid=root auid=root ses=139 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 03:00:01.392:1437) : pid=318878 uid=root auid=root ses=139 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 03:00:11.602:1438) : pid=318883 uid=root auid=root ses=140 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:00:11.602:1439) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:00:11.616:1440) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 03:01:01.270:1441) : pid=319208 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:01:01.271:1442) : pid=319208 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 03:01:01.272:1443) : pid=319208 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=141 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:01:01.272:1443) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 03:01:01.272:1443) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=319208 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=141 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 03:01:01.287:1444) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:01:01.291:1445) : pid=319211 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:01:01.291:1446) : pid=319211 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 03:01:01.291:1447) : pid=319211 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=142 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:01:01.291:1447) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:01:01.291:1447) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=319211 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=142 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 03:01:01.291:1448) : pid=319211 uid=root auid=root ses=142 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 03:01:01.312:1449) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:01:01.312:1449) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe1b6dbbf0 a2=0x78 a3=0x7ffe1b6dbbf0 items=0 ppid=1 pid=319211 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=142 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:01:01.312:1449) : prog-id=160 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:01:01.312:1450) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:01:01.312:1450) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe1b6dbcb0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=319211 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=142 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:01:01.312:1450) : prog-id=160 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:01:01.312:1451) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:01:01.312:1451) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe1b6dbcc0 a2=0x78 a3=0x7ffe1b6dbcc0 items=0 ppid=1 pid=319211 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=142 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:01:01.312:1451) : prog-id=161 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:01:01.312:1452) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:01:01.312:1452) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe1b6dbcc0 a2=0x78 a3=0x7ffe1b6dbcc0 items=0 ppid=1 pid=319211 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=142 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:01:01.312:1452) : prog-id=161 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 03:01:01.367:1453) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 03:01:01.370:1454) : pid=319208 uid=root auid=root ses=141 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:01:01.370:1455) : pid=319221 uid=root auid=root ses=141 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 03:01:01.373:1456) : pid=319208 uid=root auid=root ses=141 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 03:01:11.605:1457) : pid=319214 uid=root auid=root ses=142 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:01:11.606:1458) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:01:11.625:1459) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 03:10:01.664:1460) : pid=322142 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:10:01.664:1461) : pid=322142 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 03:10:01.664:1462) : pid=322142 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=143 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:10:01.664:1462) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 03:10:01.664:1462) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=322142 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=143 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 03:10:01.686:1463) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:10:01.689:1464) : pid=322145 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:10:01.689:1465) : pid=322145 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 03:10:01.689:1466) : pid=322145 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=144 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:10:01.689:1466) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:10:01.689:1466) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=322145 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=144 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 03:10:01.690:1467) : pid=322145 uid=root auid=root ses=144 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 03:10:01.704:1468) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:10:01.704:1468) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff84e91900 a2=0x78 a3=0x7fff84e91900 items=0 ppid=1 pid=322145 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=144 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:10:01.704:1468) : prog-id=162 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:10:01.704:1469) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:10:01.704:1469) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff84e919c0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=322145 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=144 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:10:01.704:1469) : prog-id=162 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:10:01.704:1470) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:10:01.704:1470) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff84e919d0 a2=0x78 a3=0x7fff84e919d0 items=0 ppid=1 pid=322145 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=144 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:10:01.704:1470) : prog-id=163 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:10:01.704:1471) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:10:01.704:1471) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff84e919d0 a2=0x78 a3=0x7fff84e919d0 items=0 ppid=1 pid=322145 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=144 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:10:01.704:1471) : prog-id=163 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 03:10:01.752:1472) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 03:10:01.756:1473) : pid=322142 uid=root auid=root ses=143 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:10:01.757:1474) : pid=322154 uid=root auid=root ses=143 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 03:10:01.758:1475) : pid=322142 uid=root auid=root ses=143 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 03:10:11.856:1476) : pid=322147 uid=root auid=root ses=144 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:10:11.856:1477) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:10:11.867:1478) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 03:20:01.150:1479) : pid=325393 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:20:01.151:1480) : pid=325393 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 03:20:01.151:1481) : pid=325393 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=145 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:20:01.151:1481) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 03:20:01.151:1481) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=325393 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=145 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 03:20:01.173:1482) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:20:01.178:1483) : pid=325396 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:20:01.179:1484) : pid=325396 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 03:20:01.179:1485) : pid=325396 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=146 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:20:01.179:1485) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:20:01.179:1485) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=325396 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=146 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 03:20:01.181:1486) : pid=325396 uid=root auid=root ses=146 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 03:20:01.200:1487) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:20:01.200:1487) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffec896a860 a2=0x78 a3=0x7ffec896a860 items=0 ppid=1 pid=325396 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=146 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:20:01.200:1487) : prog-id=164 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:20:01.200:1488) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:20:01.200:1488) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffec896a920 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=325396 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=146 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:20:01.200:1488) : prog-id=164 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:20:01.200:1489) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:20:01.200:1489) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffec896a930 a2=0x78 a3=0x7ffec896a930 items=0 ppid=1 pid=325396 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=146 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:20:01.200:1489) : prog-id=165 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:20:01.200:1490) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:20:01.200:1490) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffec896a930 a2=0x78 a3=0x7ffec896a930 items=0 ppid=1 pid=325396 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=146 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:20:01.200:1490) : prog-id=165 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 03:20:01.262:1491) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 03:20:01.264:1492) : pid=325393 uid=root auid=root ses=145 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:20:01.265:1493) : pid=325405 uid=root auid=root ses=145 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 03:20:01.267:1494) : pid=325393 uid=root auid=root ses=145 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 03:20:11.355:1495) : pid=325398 uid=root auid=root ses=146 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:20:11.356:1496) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:20:11.368:1497) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 03:30:01.614:1498) : pid=328750 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:30:01.614:1499) : pid=328750 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 03:30:01.615:1500) : pid=328750 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=147 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:30:01.615:1500) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 03:30:01.615:1500) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=328750 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=147 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 03:30:01.643:1501) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:30:01.646:1502) : pid=328753 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:30:01.646:1503) : pid=328753 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 03:30:01.646:1504) : pid=328753 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=148 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:30:01.646:1504) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:30:01.646:1504) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=328753 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=148 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 03:30:01.647:1505) : pid=328753 uid=root auid=root ses=148 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 03:30:01.650:1506) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:30:01.650:1506) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcd0d7e8b0 a2=0x78 a3=0x7ffcd0d7e8b0 items=0 ppid=1 pid=328753 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=148 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:30:01.650:1506) : prog-id=166 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:30:01.650:1507) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:30:01.650:1507) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcd0d7e970 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=328753 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=148 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:30:01.650:1507) : prog-id=166 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:30:01.650:1508) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:30:01.650:1508) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcd0d7e980 a2=0x78 a3=0x7ffcd0d7e980 items=0 ppid=1 pid=328753 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=148 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:30:01.650:1508) : prog-id=167 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:30:01.650:1509) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:30:01.650:1509) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcd0d7e980 a2=0x78 a3=0x7ffcd0d7e980 items=0 ppid=1 pid=328753 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=148 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:30:01.650:1509) : prog-id=167 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 03:30:01.704:1510) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 03:30:01.707:1511) : pid=328750 uid=root auid=root ses=147 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:30:01.708:1512) : pid=328762 uid=root auid=root ses=147 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 03:30:01.710:1513) : pid=328750 uid=root auid=root ses=147 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:30:11.853:1514) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:30:11.868:1515) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 03:40:01.096:1516) : pid=331943 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:40:01.097:1517) : pid=331943 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 03:40:01.097:1518) : pid=331943 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=149 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:40:01.097:1518) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 03:40:01.097:1518) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=331943 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=149 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 03:40:01.120:1519) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:40:01.123:1520) : pid=331946 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:40:01.123:1521) : pid=331946 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 03:40:01.123:1522) : pid=331946 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=150 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:40:01.123:1522) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:40:01.123:1522) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=331946 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=150 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 03:40:01.125:1523) : pid=331946 uid=root auid=root ses=150 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 03:40:01.128:1524) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:40:01.128:1524) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffeb701feb0 a2=0x78 a3=0x7ffeb701feb0 items=0 ppid=1 pid=331946 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=150 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:40:01.128:1524) : prog-id=168 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:40:01.128:1525) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:40:01.128:1525) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffeb701ff70 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=331946 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=150 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:40:01.128:1525) : prog-id=168 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:40:01.128:1526) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:40:01.128:1526) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffeb701ff80 a2=0x78 a3=0x7ffeb701ff80 items=0 ppid=1 pid=331946 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=150 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:40:01.128:1526) : prog-id=169 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:40:01.128:1527) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:40:01.128:1527) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffeb701ff80 a2=0x78 a3=0x7ffeb701ff80 items=0 ppid=1 pid=331946 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=150 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:40:01.128:1527) : prog-id=169 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 03:40:01.187:1528) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 03:40:01.190:1529) : pid=331943 uid=root auid=root ses=149 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:40:01.191:1530) : pid=331955 uid=root auid=root ses=149 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 03:40:01.193:1531) : pid=331943 uid=root auid=root ses=149 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:40:11.355:1532) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:40:11.364:1533) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 03:50:01.547:1534) : pid=335272 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:50:01.548:1535) : pid=335272 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 03:50:01.549:1536) : pid=335272 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=151 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:50:01.549:1536) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 03:50:01.549:1536) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=335272 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=151 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 03:50:01.577:1537) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 03:50:01.580:1538) : pid=335275 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:50:01.580:1539) : pid=335275 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 03:50:01.580:1540) : pid=335275 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=152 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 03:50:01.580:1540) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:50:01.580:1540) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=335275 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=152 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 03:50:01.581:1541) : pid=335275 uid=root auid=root ses=152 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 03:50:01.584:1542) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:50:01.584:1542) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcb3d3a5e0 a2=0x78 a3=0x7ffcb3d3a5e0 items=0 ppid=1 pid=335275 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=152 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:50:01.584:1542) : prog-id=170 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:50:01.584:1543) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:50:01.584:1543) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcb3d3a6a0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=335275 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=152 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:50:01.584:1543) : prog-id=170 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:50:01.584:1544) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:50:01.584:1544) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcb3d3a6b0 a2=0x78 a3=0x7ffcb3d3a6b0 items=0 ppid=1 pid=335275 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=152 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:50:01.584:1544) : prog-id=171 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 03:50:01.584:1545) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 03:50:01.584:1545) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcb3d3a6b0 a2=0x78 a3=0x7ffcb3d3a6b0 items=0 ppid=1 pid=335275 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=152 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 03:50:01.584:1545) : prog-id=171 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 03:50:01.652:1546) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 03:50:01.656:1547) : pid=335272 uid=root auid=root ses=151 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 03:50:01.656:1548) : pid=335284 uid=root auid=root ses=151 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 03:50:01.658:1549) : pid=335272 uid=root auid=root ses=151 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:50:11.853:1550) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 03:50:11.868:1551) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 04:00:02.007:1552) : pid=338624 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:00:02.008:1553) : pid=338624 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 04:00:02.008:1554) : pid=338624 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=153 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:00:02.008:1554) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 04:00:02.008:1554) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=338624 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=153 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 04:00:02.026:1555) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:00:02.030:1556) : pid=338627 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:00:02.030:1557) : pid=338627 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 04:00:02.030:1558) : pid=338627 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=154 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:00:02.030:1558) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:00:02.030:1558) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=338627 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=154 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 04:00:02.032:1559) : pid=338627 uid=root auid=root ses=154 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 04:00:02.049:1560) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:00:02.049:1560) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff59617520 a2=0x78 a3=0x7fff59617520 items=0 ppid=1 pid=338627 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=154 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:00:02.049:1560) : prog-id=172 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:00:02.049:1561) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:00:02.049:1561) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff596175e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=338627 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=154 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:00:02.049:1561) : prog-id=172 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:00:02.049:1562) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:00:02.049:1562) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff596175f0 a2=0x78 a3=0x7fff596175f0 items=0 ppid=1 pid=338627 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=154 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:00:02.049:1562) : prog-id=173 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:00:02.049:1563) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:00:02.049:1563) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff596175f0 a2=0x78 a3=0x7fff596175f0 items=0 ppid=1 pid=338627 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=154 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:00:02.049:1563) : prog-id=173 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 04:00:02.103:1564) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 04:00:02.107:1565) : pid=338624 uid=root auid=root ses=153 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:00:02.107:1566) : pid=338636 uid=root auid=root ses=153 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 04:00:02.108:1567) : pid=338624 uid=root auid=root ses=153 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 04:00:12.357:1568) : pid=338629 uid=root auid=root ses=154 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:00:12.357:1569) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:00:12.370:1570) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 04:01:00.961:1571) : pid=338909 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:01:00.962:1572) : pid=338909 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 04:01:00.962:1573) : pid=338909 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=155 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:01:00.962:1573) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 04:01:00.962:1573) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=338909 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=155 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 04:01:00.992:1574) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:01:00.997:1575) : pid=338912 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:01:00.997:1576) : pid=338912 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 04:01:00.997:1577) : pid=338912 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=156 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:01:00.997:1577) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:01:00.997:1577) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=338912 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=156 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 04:01:00.999:1578) : pid=338912 uid=root auid=root ses=156 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 04:01:01.004:1579) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:01:01.004:1579) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef75551a0 a2=0x78 a3=0x7ffef75551a0 items=0 ppid=1 pid=338912 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=156 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:01:01.004:1579) : prog-id=174 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:01:01.004:1580) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:01:01.004:1580) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef7555260 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=338912 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=156 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:01:01.004:1580) : prog-id=174 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:01:01.004:1581) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:01:01.004:1581) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef7555270 a2=0x78 a3=0x7ffef7555270 items=0 ppid=1 pid=338912 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=156 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:01:01.004:1581) : prog-id=175 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:01:01.004:1582) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:01:01.004:1582) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef7555270 a2=0x78 a3=0x7ffef7555270 items=0 ppid=1 pid=338912 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=156 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:01:01.004:1582) : prog-id=175 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 04:01:01.058:1583) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 04:01:01.064:1584) : pid=338909 uid=root auid=root ses=155 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:01:01.065:1585) : pid=338921 uid=root auid=root ses=155 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 04:01:01.067:1586) : pid=338909 uid=root auid=root ses=155 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 04:01:11.106:1587) : pid=338914 uid=root auid=root ses=156 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:01:11.107:1588) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:01:11.119:1589) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 04:02:01.906:1590) : pid=339240 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:02:01.907:1591) : pid=339240 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 04:02:01.908:1592) : pid=339240 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=157 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:02:01.908:1592) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 04:02:01.908:1592) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=339240 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=157 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 04:02:01.935:1593) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:02:01.941:1594) : pid=339243 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:02:01.941:1595) : pid=339243 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 04:02:01.941:1596) : pid=339243 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=158 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:02:01.941:1596) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:02:01.941:1596) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=339243 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=158 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 04:02:01.943:1597) : pid=339243 uid=root auid=root ses=158 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 04:02:01.949:1598) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:02:01.949:1598) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdca8d8d50 a2=0x78 a3=0x7ffdca8d8d50 items=0 ppid=1 pid=339243 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=158 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:02:01.949:1598) : prog-id=176 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:02:01.949:1599) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:02:01.949:1599) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdca8d8e10 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=339243 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=158 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:02:01.949:1599) : prog-id=176 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:02:01.949:1600) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:02:01.949:1600) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdca8d8e20 a2=0x78 a3=0x7ffdca8d8e20 items=0 ppid=1 pid=339243 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=158 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:02:01.949:1600) : prog-id=177 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:02:01.949:1601) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:02:01.949:1601) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdca8d8e20 a2=0x78 a3=0x7ffdca8d8e20 items=0 ppid=1 pid=339243 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=158 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:02:01.949:1601) : prog-id=177 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 04:02:01.999:1602) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 04:02:02.005:1603) : pid=339240 uid=root auid=root ses=157 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:02:02.005:1604) : pid=339252 uid=root auid=root ses=157 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:02:02.030:1605) : pid=339260 uid=root auid=root ses=157 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 04:02:02.197:1606) : pid=339240 uid=root auid=root ses=157 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 04:02:12.352:1607) : pid=339245 uid=root auid=root ses=158 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:02:12.352:1608) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:02:12.363:1609) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 04:10:01.073:1610) : pid=342190 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:10:01.074:1611) : pid=342190 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 04:10:01.074:1612) : pid=342190 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=159 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:10:01.074:1612) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 04:10:01.074:1612) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=342190 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=159 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 04:10:01.091:1613) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:10:01.095:1614) : pid=342193 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:10:01.095:1615) : pid=342193 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 04:10:01.095:1616) : pid=342193 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=160 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:10:01.095:1616) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:10:01.095:1616) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=342193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=160 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 04:10:01.098:1617) : pid=342193 uid=root auid=root ses=160 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 04:10:01.106:1618) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:10:01.106:1618) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc85da7120 a2=0x78 a3=0x7ffc85da7120 items=0 ppid=1 pid=342193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=160 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:10:01.106:1618) : prog-id=178 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:10:01.106:1619) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:10:01.106:1619) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc85da71e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=342193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=160 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:10:01.106:1619) : prog-id=178 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:10:01.106:1620) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:10:01.106:1620) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc85da71f0 a2=0x78 a3=0x7ffc85da71f0 items=0 ppid=1 pid=342193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=160 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:10:01.106:1620) : prog-id=179 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:10:01.106:1621) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:10:01.106:1621) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc85da71f0 a2=0x78 a3=0x7ffc85da71f0 items=0 ppid=1 pid=342193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=160 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:10:01.106:1621) : prog-id=179 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 04:10:01.170:1622) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 04:10:01.175:1623) : pid=342190 uid=root auid=root ses=159 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:10:01.176:1624) : pid=342202 uid=root auid=root ses=159 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 04:10:01.178:1625) : pid=342190 uid=root auid=root ses=159 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:10:11.357:1626) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:10:11.373:1627) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 04:20:01.533:1628) : pid=345203 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:20:01.535:1629) : pid=345203 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 04:20:01.535:1630) : pid=345203 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=161 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:20:01.535:1630) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 04:20:01.535:1630) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=345203 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=161 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 04:20:01.554:1631) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:20:01.558:1632) : pid=345206 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:20:01.558:1633) : pid=345206 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 04:20:01.559:1634) : pid=345206 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=162 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:20:01.559:1634) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:20:01.559:1634) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=345206 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=162 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 04:20:01.559:1635) : pid=345206 uid=root auid=root ses=162 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 04:20:01.573:1636) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:20:01.573:1636) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffd50eb870 a2=0x78 a3=0x7fffd50eb870 items=0 ppid=1 pid=345206 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=162 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:20:01.573:1636) : prog-id=180 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:20:01.573:1637) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:20:01.573:1637) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffd50eb930 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=345206 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=162 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:20:01.573:1637) : prog-id=180 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:20:01.573:1638) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:20:01.573:1638) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffd50eb940 a2=0x78 a3=0x7fffd50eb940 items=0 ppid=1 pid=345206 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=162 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:20:01.573:1638) : prog-id=181 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:20:01.573:1639) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:20:01.573:1639) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffd50eb940 a2=0x78 a3=0x7fffd50eb940 items=0 ppid=1 pid=345206 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=162 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:20:01.573:1639) : prog-id=181 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 04:20:01.630:1640) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 04:20:01.634:1641) : pid=345203 uid=root auid=root ses=161 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:20:01.634:1642) : pid=345215 uid=root auid=root ses=161 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 04:20:01.637:1643) : pid=345203 uid=root auid=root ses=161 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 04:20:11.856:1644) : pid=345208 uid=root auid=root ses=162 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:20:11.857:1645) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:20:11.872:1646) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 04:30:02.011:1647) : pid=348501 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:30:02.012:1648) : pid=348501 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 04:30:02.012:1649) : pid=348501 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=163 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:30:02.012:1649) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 04:30:02.012:1649) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=348501 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=163 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 04:30:02.032:1650) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:30:02.037:1651) : pid=348504 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:30:02.037:1652) : pid=348504 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 04:30:02.037:1653) : pid=348504 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=164 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:30:02.037:1653) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:30:02.037:1653) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=348504 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=164 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 04:30:02.039:1654) : pid=348504 uid=root auid=root ses=164 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 04:30:02.054:1655) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:30:02.054:1655) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdfec2b3f0 a2=0x78 a3=0x7ffdfec2b3f0 items=0 ppid=1 pid=348504 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=164 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:30:02.054:1655) : prog-id=182 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:30:02.054:1656) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:30:02.054:1656) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdfec2b4b0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=348504 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=164 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:30:02.054:1656) : prog-id=182 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:30:02.054:1657) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:30:02.054:1657) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdfec2b4c0 a2=0x78 a3=0x7ffdfec2b4c0 items=0 ppid=1 pid=348504 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=164 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:30:02.054:1657) : prog-id=183 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:30:02.054:1658) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:30:02.054:1658) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdfec2b4c0 a2=0x78 a3=0x7ffdfec2b4c0 items=0 ppid=1 pid=348504 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=164 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:30:02.054:1658) : prog-id=183 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 04:30:02.116:1659) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 04:30:02.120:1660) : pid=348501 uid=root auid=root ses=163 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:30:02.121:1661) : pid=348513 uid=root auid=root ses=163 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 04:30:02.123:1662) : pid=348501 uid=root auid=root ses=163 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 04:30:12.355:1663) : pid=348506 uid=root auid=root ses=164 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:30:12.355:1664) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:30:12.367:1665) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 04:40:01.460:1666) : pid=351954 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:40:01.461:1667) : pid=351954 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 04:40:01.461:1668) : pid=351954 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=165 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:40:01.461:1668) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 04:40:01.461:1668) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=351954 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=165 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 04:40:01.478:1669) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:40:01.481:1670) : pid=351957 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:40:01.481:1671) : pid=351957 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 04:40:01.481:1672) : pid=351957 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=166 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:40:01.481:1672) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:40:01.481:1672) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=351957 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=166 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 04:40:01.483:1673) : pid=351957 uid=root auid=root ses=166 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 04:40:01.487:1674) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:40:01.487:1674) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff5e11f6b0 a2=0x78 a3=0x7fff5e11f6b0 items=0 ppid=1 pid=351957 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=166 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:40:01.487:1674) : prog-id=184 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:40:01.487:1675) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:40:01.487:1675) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff5e11f770 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=351957 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=166 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:40:01.487:1675) : prog-id=184 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:40:01.487:1676) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:40:01.487:1676) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff5e11f780 a2=0x78 a3=0x7fff5e11f780 items=0 ppid=1 pid=351957 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=166 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:40:01.487:1676) : prog-id=185 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:40:01.487:1677) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:40:01.487:1677) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff5e11f780 a2=0x78 a3=0x7fff5e11f780 items=0 ppid=1 pid=351957 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=166 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:40:01.487:1677) : prog-id=185 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 04:40:01.543:1678) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 04:40:01.548:1679) : pid=351954 uid=root auid=root ses=165 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:40:01.548:1680) : pid=351966 uid=root auid=root ses=165 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 04:40:01.550:1681) : pid=351954 uid=root auid=root ses=165 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 04:40:11.603:1682) : pid=351959 uid=root auid=root ses=166 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:40:11.603:1683) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:40:11.614:1684) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 04:50:01.940:1685) : pid=355288 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:50:01.941:1686) : pid=355288 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 04:50:01.941:1687) : pid=355288 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=167 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:50:01.941:1687) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 04:50:01.941:1687) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=355288 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=167 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 04:50:01.961:1688) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 04:50:01.964:1689) : pid=355291 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:50:01.964:1690) : pid=355291 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 04:50:01.965:1691) : pid=355291 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=168 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 04:50:01.965:1691) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:50:01.965:1691) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=355291 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=168 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 04:50:01.966:1692) : pid=355291 uid=root auid=root ses=168 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 04:50:01.969:1693) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:50:01.969:1693) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc435316a0 a2=0x78 a3=0x7ffc435316a0 items=0 ppid=1 pid=355291 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=168 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:50:01.969:1693) : prog-id=186 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:50:01.969:1694) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:50:01.969:1694) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc43531760 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=355291 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=168 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:50:01.969:1694) : prog-id=186 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:50:01.969:1695) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:50:01.969:1695) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc43531770 a2=0x78 a3=0x7ffc43531770 items=0 ppid=1 pid=355291 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=168 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:50:01.969:1695) : prog-id=187 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 04:50:01.969:1696) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 04:50:01.969:1696) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc43531770 a2=0x78 a3=0x7ffc43531770 items=0 ppid=1 pid=355291 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=168 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 04:50:01.969:1696) : prog-id=187 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 04:50:02.011:1697) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 04:50:02.015:1698) : pid=355288 uid=root auid=root ses=167 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 04:50:02.015:1699) : pid=355300 uid=root auid=root ses=167 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 04:50:02.017:1700) : pid=355288 uid=root auid=root ses=167 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 04:50:12.105:1701) : pid=355293 uid=root auid=root ses=168 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:50:12.106:1702) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 04:50:12.118:1703) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 05:00:01.447:1704) : pid=358605 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:00:01.448:1705) : pid=358605 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 05:00:01.448:1706) : pid=358605 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=169 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:00:01.448:1706) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 05:00:01.448:1706) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=358605 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=169 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 05:00:01.474:1707) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:00:01.478:1708) : pid=358608 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:00:01.478:1709) : pid=358608 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 05:00:01.479:1710) : pid=358608 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=170 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:00:01.479:1710) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:00:01.479:1710) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=358608 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=170 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 05:00:01.480:1711) : pid=358608 uid=root auid=root ses=170 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 05:00:01.484:1712) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:00:01.484:1712) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd6e473ab0 a2=0x78 a3=0x7ffd6e473ab0 items=0 ppid=1 pid=358608 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=170 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:00:01.484:1712) : prog-id=188 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:00:01.484:1713) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:00:01.484:1713) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd6e473b70 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=358608 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=170 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:00:01.484:1713) : prog-id=188 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:00:01.484:1714) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:00:01.484:1714) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd6e473b80 a2=0x78 a3=0x7ffd6e473b80 items=0 ppid=1 pid=358608 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=170 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:00:01.484:1714) : prog-id=189 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:00:01.484:1715) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:00:01.484:1715) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd6e473b80 a2=0x78 a3=0x7ffd6e473b80 items=0 ppid=1 pid=358608 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=170 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:00:01.484:1715) : prog-id=189 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 05:00:01.531:1716) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 05:00:01.534:1717) : pid=358605 uid=root auid=root ses=169 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:00:01.535:1718) : pid=358617 uid=root auid=root ses=169 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 05:00:01.537:1719) : pid=358605 uid=root auid=root ses=169 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 05:00:11.605:1720) : pid=358610 uid=root auid=root ses=170 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:00:11.606:1721) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:00:11.619:1722) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 05:01:01.415:1723) : pid=358934 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:01:01.417:1724) : pid=358934 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 05:01:01.417:1725) : pid=358934 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=171 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:01:01.417:1725) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 05:01:01.417:1725) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=358934 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=171 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 05:01:01.441:1726) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:01:01.444:1727) : pid=358937 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:01:01.444:1728) : pid=358937 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 05:01:01.444:1729) : pid=358937 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=172 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:01:01.444:1729) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:01:01.444:1729) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=358937 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=172 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 05:01:01.445:1730) : pid=358937 uid=root auid=root ses=172 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 05:01:01.448:1731) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:01:01.448:1731) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdf321dc10 a2=0x78 a3=0x7ffdf321dc10 items=0 ppid=1 pid=358937 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=172 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:01:01.448:1731) : prog-id=190 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:01:01.448:1732) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:01:01.448:1732) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdf321dcd0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=358937 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=172 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:01:01.448:1732) : prog-id=190 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:01:01.448:1733) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:01:01.448:1733) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdf321dce0 a2=0x78 a3=0x7ffdf321dce0 items=0 ppid=1 pid=358937 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=172 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:01:01.448:1733) : prog-id=191 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:01:01.448:1734) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:01:01.448:1734) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdf321dce0 a2=0x78 a3=0x7ffdf321dce0 items=0 ppid=1 pid=358937 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=172 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:01:01.448:1734) : prog-id=191 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 05:01:01.495:1735) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 05:01:01.498:1736) : pid=358934 uid=root auid=root ses=171 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:01:01.499:1737) : pid=358946 uid=root auid=root ses=171 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 05:01:01.503:1738) : pid=358934 uid=root auid=root ses=171 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:01:11.602:1739) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:01:11.617:1740) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 05:10:01.843:1741) : pid=361808 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:10:01.844:1742) : pid=361808 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 05:10:01.844:1743) : pid=361808 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=173 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:10:01.844:1743) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 05:10:01.844:1743) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=361808 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=173 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 05:10:01.868:1744) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:10:01.873:1745) : pid=361811 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:10:01.873:1746) : pid=361811 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 05:10:01.873:1747) : pid=361811 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=174 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:10:01.873:1747) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:10:01.873:1747) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=361811 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=174 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 05:10:01.874:1748) : pid=361811 uid=root auid=root ses=174 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 05:10:01.878:1749) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:10:01.878:1749) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe92320fb0 a2=0x78 a3=0x7ffe92320fb0 items=0 ppid=1 pid=361811 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=174 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:10:01.878:1749) : prog-id=192 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:10:01.878:1750) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:10:01.878:1750) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe92321070 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=361811 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=174 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:10:01.878:1750) : prog-id=192 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:10:01.878:1751) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:10:01.878:1751) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe92321080 a2=0x78 a3=0x7ffe92321080 items=0 ppid=1 pid=361811 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=174 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:10:01.878:1751) : prog-id=193 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:10:01.878:1752) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:10:01.878:1752) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe92321080 a2=0x78 a3=0x7ffe92321080 items=0 ppid=1 pid=361811 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=174 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:10:01.878:1752) : prog-id=193 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 05:10:01.925:1753) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 05:10:01.928:1754) : pid=361808 uid=root auid=root ses=173 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:10:01.929:1755) : pid=361820 uid=root auid=root ses=173 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 05:10:01.931:1756) : pid=361808 uid=root auid=root ses=173 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:10:12.105:1757) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:10:12.125:1758) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 05:20:01.329:1759) : pid=365030 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:20:01.330:1760) : pid=365030 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 05:20:01.330:1761) : pid=365030 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=175 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:20:01.330:1761) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 05:20:01.330:1761) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=365030 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=175 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 05:20:01.351:1762) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:20:01.354:1763) : pid=365033 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:20:01.354:1764) : pid=365033 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 05:20:01.354:1765) : pid=365033 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=176 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:20:01.354:1765) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:20:01.354:1765) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=365033 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=176 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 05:20:01.356:1766) : pid=365033 uid=root auid=root ses=176 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 05:20:01.369:1767) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:20:01.369:1767) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff1e9ac7e0 a2=0x78 a3=0x7fff1e9ac7e0 items=0 ppid=1 pid=365033 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=176 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:20:01.369:1767) : prog-id=194 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:20:01.369:1768) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:20:01.369:1768) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff1e9ac8a0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=365033 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=176 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:20:01.369:1768) : prog-id=194 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:20:01.369:1769) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:20:01.369:1769) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff1e9ac8b0 a2=0x78 a3=0x7fff1e9ac8b0 items=0 ppid=1 pid=365033 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=176 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:20:01.369:1769) : prog-id=195 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:20:01.369:1770) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:20:01.369:1770) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff1e9ac8b0 a2=0x78 a3=0x7fff1e9ac8b0 items=0 ppid=1 pid=365033 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=176 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:20:01.369:1770) : prog-id=195 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 05:20:01.429:1771) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 05:20:01.435:1772) : pid=365030 uid=root auid=root ses=175 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:20:01.436:1773) : pid=365042 uid=root auid=root ses=175 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 05:20:01.439:1774) : pid=365030 uid=root auid=root ses=175 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:20:11.605:1775) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:20:11.626:1776) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 05:30:01.806:1777) : pid=368403 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:30:01.807:1778) : pid=368403 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 05:30:01.807:1779) : pid=368403 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=177 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:30:01.807:1779) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 05:30:01.807:1779) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=368403 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=177 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 05:30:01.835:1780) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:30:01.839:1781) : pid=368406 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:30:01.839:1782) : pid=368406 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 05:30:01.839:1783) : pid=368406 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=178 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:30:01.839:1783) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:30:01.839:1783) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=368406 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=178 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 05:30:01.841:1784) : pid=368406 uid=root auid=root ses=178 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 05:30:01.852:1785) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:30:01.852:1785) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffffe22c2b0 a2=0x78 a3=0x7ffffe22c2b0 items=0 ppid=1 pid=368406 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=178 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:30:01.852:1785) : prog-id=196 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:30:01.852:1786) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:30:01.852:1786) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffffe22c370 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=368406 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=178 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:30:01.852:1786) : prog-id=196 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:30:01.852:1787) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:30:01.852:1787) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffffe22c380 a2=0x78 a3=0x7ffffe22c380 items=0 ppid=1 pid=368406 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=178 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:30:01.852:1787) : prog-id=197 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:30:01.852:1788) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:30:01.852:1788) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffffe22c380 a2=0x78 a3=0x7ffffe22c380 items=0 ppid=1 pid=368406 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=178 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:30:01.852:1788) : prog-id=197 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 05:30:01.902:1789) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 05:30:01.907:1790) : pid=368403 uid=root auid=root ses=177 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:30:01.908:1791) : pid=368415 uid=root auid=root ses=177 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 05:30:01.910:1792) : pid=368403 uid=root auid=root ses=177 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:30:12.104:1793) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:30:12.114:1794) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 05:40:01.277:1795) : pid=371757 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:40:01.278:1796) : pid=371757 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 05:40:01.278:1797) : pid=371757 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=179 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:40:01.278:1797) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 05:40:01.278:1797) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=371757 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=179 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 05:40:01.297:1798) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:40:01.301:1799) : pid=371760 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:40:01.301:1800) : pid=371760 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 05:40:01.301:1801) : pid=371760 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=180 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:40:01.301:1801) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:40:01.301:1801) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=371760 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=180 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 05:40:01.303:1802) : pid=371760 uid=root auid=root ses=180 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 05:40:01.313:1803) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:40:01.313:1803) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc1cf2c090 a2=0x78 a3=0x7ffc1cf2c090 items=0 ppid=1 pid=371760 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=180 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:40:01.313:1803) : prog-id=198 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:40:01.313:1804) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:40:01.313:1804) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc1cf2c150 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=371760 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=180 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:40:01.313:1804) : prog-id=198 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:40:01.313:1805) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:40:01.313:1805) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc1cf2c160 a2=0x78 a3=0x7ffc1cf2c160 items=0 ppid=1 pid=371760 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=180 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:40:01.313:1805) : prog-id=199 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:40:01.313:1806) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:40:01.313:1806) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc1cf2c160 a2=0x78 a3=0x7ffc1cf2c160 items=0 ppid=1 pid=371760 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=180 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:40:01.313:1806) : prog-id=199 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 05:40:01.371:1807) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 05:40:01.377:1808) : pid=371757 uid=root auid=root ses=179 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:40:01.378:1809) : pid=371769 uid=root auid=root ses=179 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 05:40:01.381:1810) : pid=371757 uid=root auid=root ses=179 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 05:40:11.606:1811) : pid=371762 uid=root auid=root ses=180 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:40:11.607:1812) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:40:11.618:1813) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 05:50:01.747:1814) : pid=375126 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:50:01.748:1815) : pid=375126 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 05:50:01.748:1816) : pid=375126 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=181 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:50:01.748:1816) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 05:50:01.748:1816) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=375126 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=181 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 05:50:01.773:1817) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 05:50:01.777:1818) : pid=375129 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:50:01.777:1819) : pid=375129 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 05:50:01.777:1820) : pid=375129 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=182 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 05:50:01.777:1820) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:50:01.777:1820) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=375129 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=182 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 05:50:01.779:1821) : pid=375129 uid=root auid=root ses=182 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 05:50:01.791:1822) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:50:01.791:1822) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9cb247a0 a2=0x78 a3=0x7fff9cb247a0 items=0 ppid=1 pid=375129 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=182 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:50:01.791:1822) : prog-id=200 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:50:01.791:1823) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:50:01.791:1823) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9cb24860 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=375129 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=182 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:50:01.791:1823) : prog-id=200 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:50:01.791:1824) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:50:01.791:1824) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9cb24870 a2=0x78 a3=0x7fff9cb24870 items=0 ppid=1 pid=375129 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=182 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:50:01.791:1824) : prog-id=201 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 05:50:01.791:1825) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 05:50:01.791:1825) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9cb24870 a2=0x78 a3=0x7fff9cb24870 items=0 ppid=1 pid=375129 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=182 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 05:50:01.791:1825) : prog-id=201 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 05:50:01.843:1826) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 05:50:01.846:1827) : pid=375126 uid=root auid=root ses=181 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 05:50:01.848:1828) : pid=375138 uid=root auid=root ses=181 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 05:50:01.852:1829) : pid=375126 uid=root auid=root ses=181 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:50:12.106:1830) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 05:50:12.117:1831) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 06:00:01.210:1832) : pid=378547 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:00:01.211:1833) : pid=378547 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 06:00:01.211:1834) : pid=378547 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=183 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:00:01.211:1834) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 06:00:01.211:1834) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=378547 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=183 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 06:00:01.235:1835) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:00:01.239:1836) : pid=378550 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:00:01.239:1837) : pid=378550 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 06:00:01.239:1838) : pid=378550 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=184 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:00:01.239:1838) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:00:01.239:1838) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=378550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=184 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 06:00:01.241:1839) : pid=378550 uid=root auid=root ses=184 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 06:00:01.257:1840) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:00:01.257:1840) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffda3222720 a2=0x78 a3=0x7ffda3222720 items=0 ppid=1 pid=378550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=184 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:00:01.257:1840) : prog-id=202 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:00:01.257:1841) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:00:01.257:1841) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffda32227e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=378550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=184 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:00:01.257:1841) : prog-id=202 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:00:01.257:1842) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:00:01.257:1842) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffda32227f0 a2=0x78 a3=0x7ffda32227f0 items=0 ppid=1 pid=378550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=184 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:00:01.257:1842) : prog-id=203 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:00:01.257:1843) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:00:01.257:1843) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffda32227f0 a2=0x78 a3=0x7ffda32227f0 items=0 ppid=1 pid=378550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=184 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:00:01.257:1843) : prog-id=203 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 06:00:01.307:1844) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 06:00:01.313:1845) : pid=378547 uid=root auid=root ses=183 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:00:01.314:1846) : pid=378559 uid=root auid=root ses=183 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 06:00:01.316:1847) : pid=378547 uid=root auid=root ses=183 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 06:00:11.356:1848) : pid=378552 uid=root auid=root ses=184 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:00:11.356:1849) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:00:11.375:1850) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 06:01:01.161:1851) : pid=378875 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:01:01.162:1852) : pid=378875 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 06:01:01.162:1853) : pid=378875 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=185 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:01:01.162:1853) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 06:01:01.162:1853) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=378875 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=185 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 06:01:01.177:1854) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:01:01.180:1855) : pid=378880 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:01:01.181:1856) : pid=378880 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 06:01:01.181:1857) : pid=378880 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=186 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:01:01.181:1857) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:01:01.181:1857) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=378880 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=186 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 06:01:01.182:1858) : pid=378880 uid=root auid=root ses=186 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 06:01:01.198:1859) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:01:01.198:1859) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe83852030 a2=0x78 a3=0x7ffe83852030 items=0 ppid=1 pid=378880 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=186 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:01:01.198:1859) : prog-id=204 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:01:01.198:1860) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:01:01.198:1860) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe838520f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=378880 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=186 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:01:01.198:1860) : prog-id=204 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:01:01.198:1861) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:01:01.198:1861) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe83852100 a2=0x78 a3=0x7ffe83852100 items=0 ppid=1 pid=378880 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=186 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:01:01.198:1861) : prog-id=205 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:01:01.198:1862) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:01:01.198:1862) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe83852100 a2=0x78 a3=0x7ffe83852100 items=0 ppid=1 pid=378880 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=186 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:01:01.198:1862) : prog-id=205 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 06:01:01.250:1863) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 06:01:01.254:1864) : pid=378875 uid=root auid=root ses=185 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:01:01.255:1865) : pid=378889 uid=root auid=root ses=185 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 06:01:01.257:1866) : pid=378875 uid=root auid=root ses=185 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 06:01:11.358:1867) : pid=378882 uid=root auid=root ses=186 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:01:11.359:1868) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:01:11.380:1869) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 06:10:01.579:1870) : pid=382059 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:10:01.579:1871) : pid=382059 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 06:10:01.580:1872) : pid=382059 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=187 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:10:01.580:1872) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 06:10:01.580:1872) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=382059 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=187 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 06:10:01.605:1873) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:10:01.611:1874) : pid=382062 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:10:01.611:1875) : pid=382062 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 06:10:01.611:1876) : pid=382062 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=188 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:10:01.611:1876) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:10:01.611:1876) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=382062 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=188 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 06:10:01.611:1877) : pid=382062 uid=root auid=root ses=188 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 06:10:01.617:1878) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:10:01.617:1878) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd258d5c60 a2=0x78 a3=0x7ffd258d5c60 items=0 ppid=1 pid=382062 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=188 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:10:01.617:1878) : prog-id=206 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:10:01.617:1879) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:10:01.617:1879) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd258d5d20 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=382062 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=188 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:10:01.617:1879) : prog-id=206 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:10:01.617:1880) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:10:01.617:1880) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd258d5d30 a2=0x78 a3=0x7ffd258d5d30 items=0 ppid=1 pid=382062 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=188 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:10:01.617:1880) : prog-id=207 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:10:01.617:1881) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:10:01.617:1881) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd258d5d30 a2=0x78 a3=0x7ffd258d5d30 items=0 ppid=1 pid=382062 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=188 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:10:01.617:1881) : prog-id=207 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 06:10:01.669:1882) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 06:10:01.674:1883) : pid=382059 uid=root auid=root ses=187 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:10:01.674:1884) : pid=382071 uid=root auid=root ses=187 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 06:10:01.676:1885) : pid=382059 uid=root auid=root ses=187 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:10:11.852:1886) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:10:11.867:1887) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 06:20:02.053:1888) : pid=385130 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:20:02.054:1889) : pid=385130 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 06:20:02.055:1890) : pid=385130 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=189 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:20:02.055:1890) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 06:20:02.055:1890) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=385130 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=189 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 06:20:02.077:1891) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:20:02.080:1892) : pid=385133 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:20:02.080:1893) : pid=385133 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 06:20:02.082:1894) : pid=385133 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=190 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:20:02.082:1894) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:20:02.082:1894) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=385133 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=190 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 06:20:02.082:1895) : pid=385133 uid=root auid=root ses=190 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 06:20:02.086:1896) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:20:02.086:1896) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc796dcb70 a2=0x78 a3=0x7ffc796dcb70 items=0 ppid=1 pid=385133 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=190 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:20:02.086:1896) : prog-id=208 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:20:02.086:1897) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:20:02.086:1897) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc796dcc30 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=385133 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=190 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:20:02.086:1897) : prog-id=208 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:20:02.086:1898) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:20:02.086:1898) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc796dcc40 a2=0x78 a3=0x7ffc796dcc40 items=0 ppid=1 pid=385133 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=190 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:20:02.086:1898) : prog-id=209 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:20:02.086:1899) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:20:02.086:1899) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc796dcc40 a2=0x78 a3=0x7ffc796dcc40 items=0 ppid=1 pid=385133 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=190 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:20:02.086:1899) : prog-id=209 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 06:20:02.140:1900) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 06:20:02.144:1901) : pid=385130 uid=root auid=root ses=189 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:20:02.144:1902) : pid=385142 uid=root auid=root ses=189 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 06:20:02.147:1903) : pid=385130 uid=root auid=root ses=189 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 06:20:12.353:1904) : pid=385135 uid=root auid=root ses=190 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:20:12.354:1905) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:20:12.368:1906) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 06:30:01.521:1907) : pid=388455 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:30:01.522:1908) : pid=388455 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 06:30:01.523:1909) : pid=388455 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=191 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:30:01.523:1909) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 06:30:01.523:1909) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=388455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=191 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 06:30:01.545:1910) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:30:01.551:1911) : pid=388458 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:30:01.551:1912) : pid=388458 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 06:30:01.551:1913) : pid=388458 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=192 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:30:01.551:1913) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:30:01.551:1913) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=388458 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=192 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 06:30:01.552:1914) : pid=388458 uid=root auid=root ses=192 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 06:30:01.556:1915) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:30:01.556:1915) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe767441f0 a2=0x78 a3=0x7ffe767441f0 items=0 ppid=1 pid=388458 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=192 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:30:01.556:1915) : prog-id=210 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:30:01.556:1916) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:30:01.556:1916) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe767442b0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=388458 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=192 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:30:01.556:1916) : prog-id=210 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:30:01.556:1917) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:30:01.556:1917) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe767442c0 a2=0x78 a3=0x7ffe767442c0 items=0 ppid=1 pid=388458 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=192 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:30:01.556:1917) : prog-id=211 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:30:01.556:1918) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:30:01.556:1918) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe767442c0 a2=0x78 a3=0x7ffe767442c0 items=0 ppid=1 pid=388458 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=192 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:30:01.556:1918) : prog-id=211 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 06:30:01.611:1919) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 06:30:01.614:1920) : pid=388455 uid=root auid=root ses=191 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:30:01.615:1921) : pid=388467 uid=root auid=root ses=191 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 06:30:01.616:1922) : pid=388455 uid=root auid=root ses=191 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:30:11.856:1923) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:30:11.874:1924) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 06:40:01.996:1925) : pid=391860 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:40:01.997:1926) : pid=391860 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 06:40:01.998:1927) : pid=391860 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=193 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:40:01.998:1927) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 06:40:01.998:1927) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=391860 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=193 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 06:40:02.020:1928) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:40:02.023:1929) : pid=391863 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:40:02.024:1930) : pid=391863 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 06:40:02.024:1931) : pid=391863 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=194 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:40:02.024:1931) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:40:02.024:1931) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=391863 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=194 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 06:40:02.025:1932) : pid=391863 uid=root auid=root ses=194 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 06:40:02.029:1933) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:40:02.029:1933) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffea60fa590 a2=0x78 a3=0x7ffea60fa590 items=0 ppid=1 pid=391863 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=194 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:40:02.029:1933) : prog-id=212 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:40:02.030:1934) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:40:02.030:1934) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffea60fa650 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=391863 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=194 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:40:02.030:1934) : prog-id=212 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:40:02.030:1935) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:40:02.030:1935) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffea60fa660 a2=0x78 a3=0x7ffea60fa660 items=0 ppid=1 pid=391863 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=194 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:40:02.030:1935) : prog-id=213 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:40:02.030:1936) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:40:02.030:1936) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffea60fa660 a2=0x78 a3=0x7ffea60fa660 items=0 ppid=1 pid=391863 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=194 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:40:02.030:1936) : prog-id=213 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 06:40:02.090:1937) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 06:40:02.093:1938) : pid=391860 uid=root auid=root ses=193 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:40:02.093:1939) : pid=391872 uid=root auid=root ses=193 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 06:40:02.095:1940) : pid=391860 uid=root auid=root ses=193 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 06:40:12.353:1941) : pid=391865 uid=root auid=root ses=194 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:40:12.354:1942) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:40:12.370:1943) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 06:50:01.465:1944) : pid=395005 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:50:01.466:1945) : pid=395005 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 06:50:01.466:1946) : pid=395005 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=195 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:50:01.466:1946) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 06:50:01.466:1946) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=395005 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=195 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 06:50:01.491:1947) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 06:50:01.496:1948) : pid=395008 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:50:01.496:1949) : pid=395008 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 06:50:01.496:1950) : pid=395008 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=196 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 06:50:01.496:1950) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:50:01.496:1950) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=395008 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=196 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 06:50:01.497:1951) : pid=395008 uid=root auid=root ses=196 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 06:50:01.510:1952) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:50:01.510:1952) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcd140c8c0 a2=0x78 a3=0x7ffcd140c8c0 items=0 ppid=1 pid=395008 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=196 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:50:01.510:1952) : prog-id=214 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:50:01.510:1953) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:50:01.510:1953) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcd140c980 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=395008 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=196 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:50:01.510:1953) : prog-id=214 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:50:01.510:1954) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:50:01.510:1954) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcd140c990 a2=0x78 a3=0x7ffcd140c990 items=0 ppid=1 pid=395008 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=196 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:50:01.510:1954) : prog-id=215 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 06:50:01.510:1955) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 06:50:01.510:1955) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcd140c990 a2=0x78 a3=0x7ffcd140c990 items=0 ppid=1 pid=395008 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=196 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 06:50:01.510:1955) : prog-id=215 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 06:50:01.565:1956) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 06:50:01.568:1957) : pid=395005 uid=root auid=root ses=195 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 06:50:01.569:1958) : pid=395017 uid=root auid=root ses=195 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 06:50:01.571:1959) : pid=395005 uid=root auid=root ses=195 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:50:11.607:1960) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 06:50:11.621:1961) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 07:00:01.941:1962) : pid=398469 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:00:01.942:1963) : pid=398469 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 07:00:01.943:1964) : pid=398469 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=197 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:00:01.943:1964) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 07:00:01.943:1964) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=398469 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=197 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 07:00:01.963:1965) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:00:01.967:1966) : pid=398472 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:00:01.967:1967) : pid=398472 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 07:00:01.967:1968) : pid=398472 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=198 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:00:01.967:1968) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:00:01.967:1968) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=398472 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=198 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 07:00:01.968:1969) : pid=398472 uid=root auid=root ses=198 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 07:00:01.981:1970) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:00:01.981:1970) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffc7b52f80 a2=0x78 a3=0x7fffc7b52f80 items=0 ppid=1 pid=398472 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=198 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:00:01.981:1970) : prog-id=216 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:00:01.981:1971) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:00:01.981:1971) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffc7b53040 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=398472 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=198 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:00:01.981:1971) : prog-id=216 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:00:01.981:1972) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:00:01.981:1972) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffc7b53050 a2=0x78 a3=0x7fffc7b53050 items=0 ppid=1 pid=398472 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=198 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:00:01.981:1972) : prog-id=217 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:00:01.981:1973) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:00:01.981:1973) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffc7b53050 a2=0x78 a3=0x7fffc7b53050 items=0 ppid=1 pid=398472 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=198 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:00:01.981:1973) : prog-id=217 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 07:00:02.037:1974) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 07:00:02.043:1975) : pid=398469 uid=root auid=root ses=197 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:00:02.044:1976) : pid=398481 uid=root auid=root ses=197 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 07:00:02.046:1977) : pid=398469 uid=root auid=root ses=197 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 07:00:12.103:1978) : pid=398474 uid=root auid=root ses=198 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:00:12.103:1979) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:00:12.128:1980) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 07:01:01.894:1981) : pid=398795 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:01:01.895:1982) : pid=398795 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 07:01:01.895:1983) : pid=398795 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=199 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:01:01.895:1983) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 07:01:01.895:1983) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=398795 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=199 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 07:01:01.916:1984) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:01:01.927:1985) : pid=398798 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:01:01.927:1986) : pid=398798 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 07:01:01.928:1987) : pid=398798 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=200 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:01:01.928:1987) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:01:01.928:1987) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=398798 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=200 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 07:01:01.930:1988) : pid=398798 uid=root auid=root ses=200 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 07:01:01.937:1989) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:01:01.937:1989) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9d8d90b0 a2=0x78 a3=0x7fff9d8d90b0 items=0 ppid=1 pid=398798 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=200 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:01:01.937:1989) : prog-id=218 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:01:01.937:1990) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:01:01.937:1990) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9d8d9170 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=398798 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=200 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:01:01.937:1990) : prog-id=218 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:01:01.937:1991) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:01:01.937:1991) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9d8d9180 a2=0x78 a3=0x7fff9d8d9180 items=0 ppid=1 pid=398798 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=200 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:01:01.937:1991) : prog-id=219 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:01:01.937:1992) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:01:01.937:1992) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9d8d9180 a2=0x78 a3=0x7fff9d8d9180 items=0 ppid=1 pid=398798 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=200 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:01:01.937:1992) : prog-id=219 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 07:01:01.991:1993) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 07:01:01.994:1994) : pid=398795 uid=root auid=root ses=199 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:01:01.995:1995) : pid=398809 uid=root auid=root ses=199 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 07:01:01.997:1996) : pid=398795 uid=root auid=root ses=199 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 07:01:12.105:1997) : pid=398800 uid=root auid=root ses=200 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:01:12.106:1998) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:01:12.127:1999) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 07:10:01.300:2000) : pid=401865 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:10:01.301:2001) : pid=401865 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 07:10:01.301:2002) : pid=401865 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=201 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:10:01.301:2002) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 07:10:01.301:2002) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=401865 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=201 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 07:10:01.327:2003) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:10:01.331:2004) : pid=401868 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:10:01.331:2005) : pid=401868 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 07:10:01.332:2006) : pid=401868 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=202 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:10:01.332:2006) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:10:01.332:2006) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=401868 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=202 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 07:10:01.333:2007) : pid=401868 uid=root auid=root ses=202 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 07:10:01.354:2008) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:10:01.354:2008) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcf2c9e7d0 a2=0x78 a3=0x7ffcf2c9e7d0 items=0 ppid=1 pid=401868 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=202 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:10:01.354:2008) : prog-id=220 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:10:01.354:2009) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:10:01.354:2009) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcf2c9e890 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=401868 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=202 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:10:01.354:2009) : prog-id=220 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:10:01.354:2010) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:10:01.354:2010) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcf2c9e8a0 a2=0x78 a3=0x7ffcf2c9e8a0 items=0 ppid=1 pid=401868 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=202 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:10:01.354:2010) : prog-id=221 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:10:01.354:2011) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:10:01.354:2011) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcf2c9e8a0 a2=0x78 a3=0x7ffcf2c9e8a0 items=0 ppid=1 pid=401868 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=202 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:10:01.354:2011) : prog-id=221 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 07:10:01.407:2012) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 07:10:01.411:2013) : pid=401865 uid=root auid=root ses=201 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:10:01.412:2014) : pid=401877 uid=root auid=root ses=201 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 07:10:01.413:2015) : pid=401865 uid=root auid=root ses=201 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:10:11.608:2016) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:10:11.633:2017) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 07:20:01.767:2018) : pid=405016 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:20:01.768:2019) : pid=405016 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 07:20:01.768:2020) : pid=405016 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=203 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:20:01.768:2020) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 07:20:01.768:2020) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=405016 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=203 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 07:20:01.787:2021) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:20:01.790:2022) : pid=405019 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:20:01.790:2023) : pid=405019 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 07:20:01.790:2024) : pid=405019 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=204 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:20:01.790:2024) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:20:01.790:2024) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=405019 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=204 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 07:20:01.792:2025) : pid=405019 uid=root auid=root ses=204 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 07:20:01.796:2026) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:20:01.796:2026) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffde6ced4b0 a2=0x78 a3=0x7ffde6ced4b0 items=0 ppid=1 pid=405019 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=204 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:20:01.796:2026) : prog-id=222 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:20:01.796:2027) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:20:01.796:2027) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffde6ced570 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=405019 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=204 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:20:01.796:2027) : prog-id=222 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:20:01.796:2028) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:20:01.796:2028) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffde6ced580 a2=0x78 a3=0x7ffde6ced580 items=0 ppid=1 pid=405019 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=204 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:20:01.796:2028) : prog-id=223 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:20:01.796:2029) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:20:01.796:2029) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffde6ced580 a2=0x78 a3=0x7ffde6ced580 items=0 ppid=1 pid=405019 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=204 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:20:01.796:2029) : prog-id=223 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 07:20:01.851:2030) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 07:20:01.855:2031) : pid=405016 uid=root auid=root ses=203 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:20:01.856:2032) : pid=405028 uid=root auid=root ses=203 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 07:20:01.857:2033) : pid=405016 uid=root auid=root ses=203 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:20:12.105:2034) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:20:12.119:2035) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 07:30:01.256:2036) : pid=408474 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:30:01.258:2037) : pid=408474 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 07:30:01.258:2038) : pid=408474 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=205 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:30:01.258:2038) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 07:30:01.258:2038) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=408474 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=205 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 07:30:01.286:2039) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:30:01.291:2040) : pid=408477 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:30:01.291:2041) : pid=408477 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 07:30:01.291:2042) : pid=408477 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=206 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:30:01.291:2042) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:30:01.291:2042) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=408477 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=206 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 07:30:01.293:2043) : pid=408477 uid=root auid=root ses=206 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 07:30:01.298:2044) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:30:01.298:2044) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe68d95320 a2=0x78 a3=0x7ffe68d95320 items=0 ppid=1 pid=408477 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=206 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:30:01.298:2044) : prog-id=224 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:30:01.298:2045) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:30:01.298:2045) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe68d953e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=408477 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=206 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:30:01.298:2045) : prog-id=224 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:30:01.298:2046) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:30:01.298:2046) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe68d953f0 a2=0x78 a3=0x7ffe68d953f0 items=0 ppid=1 pid=408477 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=206 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:30:01.298:2046) : prog-id=225 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:30:01.298:2047) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:30:01.298:2047) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe68d953f0 a2=0x78 a3=0x7ffe68d953f0 items=0 ppid=1 pid=408477 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=206 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:30:01.298:2047) : prog-id=225 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 07:30:01.361:2048) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 07:30:01.373:2049) : pid=408474 uid=root auid=root ses=205 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:30:01.375:2050) : pid=408486 uid=root auid=root ses=205 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 07:30:01.378:2051) : pid=408474 uid=root auid=root ses=205 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:30:11.609:2052) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:30:11.631:2053) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 07:40:01.694:2054) : pid=411845 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:40:01.696:2055) : pid=411845 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 07:40:01.696:2056) : pid=411845 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=207 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:40:01.696:2056) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 07:40:01.696:2056) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=411845 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=207 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 07:40:01.729:2057) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:40:01.732:2058) : pid=411848 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:40:01.732:2059) : pid=411848 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 07:40:01.732:2060) : pid=411848 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=208 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:40:01.732:2060) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:40:01.732:2060) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=411848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=208 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 07:40:01.733:2061) : pid=411848 uid=root auid=root ses=208 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 07:40:01.747:2062) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:40:01.747:2062) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd63d3cd10 a2=0x78 a3=0x7ffd63d3cd10 items=0 ppid=1 pid=411848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=208 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:40:01.747:2062) : prog-id=226 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:40:01.747:2063) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:40:01.747:2063) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd63d3cdd0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=411848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=208 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:40:01.747:2063) : prog-id=226 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:40:01.747:2064) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:40:01.747:2064) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd63d3cde0 a2=0x78 a3=0x7ffd63d3cde0 items=0 ppid=1 pid=411848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=208 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:40:01.747:2064) : prog-id=227 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:40:01.747:2065) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:40:01.747:2065) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd63d3cde0 a2=0x78 a3=0x7ffd63d3cde0 items=0 ppid=1 pid=411848 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=208 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:40:01.747:2065) : prog-id=227 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 07:40:01.784:2066) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 07:40:01.787:2067) : pid=411845 uid=root auid=root ses=207 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:40:01.787:2068) : pid=411857 uid=root auid=root ses=207 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 07:40:01.789:2069) : pid=411845 uid=root auid=root ses=207 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 07:40:11.853:2070) : pid=411850 uid=root auid=root ses=208 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:40:11.854:2071) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:40:11.867:2072) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 07:50:01.145:2073) : pid=415114 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:50:01.145:2074) : pid=415114 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 07:50:01.145:2075) : pid=415114 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=209 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:50:01.145:2075) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 07:50:01.145:2075) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=415114 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=209 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 07:50:01.166:2076) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 07:50:01.168:2077) : pid=415117 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:50:01.168:2078) : pid=415117 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 07:50:01.168:2079) : pid=415117 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=210 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 07:50:01.168:2079) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:50:01.168:2079) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=415117 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=210 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 07:50:01.170:2080) : pid=415117 uid=root auid=root ses=210 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 07:50:01.184:2081) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:50:01.184:2081) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffffd8148e0 a2=0x78 a3=0x7ffffd8148e0 items=0 ppid=1 pid=415117 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=210 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:50:01.184:2081) : prog-id=228 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:50:01.184:2082) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:50:01.184:2082) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffffd8149a0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=415117 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=210 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:50:01.184:2082) : prog-id=228 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:50:01.184:2083) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:50:01.184:2083) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffffd8149b0 a2=0x78 a3=0x7ffffd8149b0 items=0 ppid=1 pid=415117 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=210 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:50:01.184:2083) : prog-id=229 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 07:50:01.184:2084) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 07:50:01.184:2084) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffffd8149b0 a2=0x78 a3=0x7ffffd8149b0 items=0 ppid=1 pid=415117 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=210 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 07:50:01.184:2084) : prog-id=229 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 07:50:01.246:2085) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 07:50:01.250:2086) : pid=415114 uid=root auid=root ses=209 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 07:50:01.250:2087) : pid=415126 uid=root auid=root ses=209 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 07:50:01.252:2088) : pid=415114 uid=root auid=root ses=209 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 07:50:11.355:2089) : pid=415119 uid=root auid=root ses=210 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:50:11.355:2090) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 07:50:11.365:2091) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 08:00:01.578:2092) : pid=418560 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:00:01.578:2093) : pid=418560 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 08:00:01.580:2094) : pid=418560 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=211 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:00:01.580:2094) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 08:00:01.580:2094) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=418560 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=211 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 08:00:01.598:2095) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:00:01.602:2096) : pid=418564 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:00:01.602:2097) : pid=418564 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 08:00:01.602:2098) : pid=418564 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=212 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:00:01.602:2098) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:00:01.602:2098) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=418564 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=212 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 08:00:01.605:2099) : pid=418564 uid=root auid=root ses=212 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 08:00:01.610:2100) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:00:01.610:2100) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd91ec7cf0 a2=0x78 a3=0x7ffd91ec7cf0 items=0 ppid=1 pid=418564 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=212 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:00:01.610:2100) : prog-id=230 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:00:01.610:2101) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:00:01.610:2101) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd91ec7db0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=418564 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=212 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:00:01.610:2101) : prog-id=230 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:00:01.610:2102) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:00:01.610:2102) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd91ec7dc0 a2=0x78 a3=0x7ffd91ec7dc0 items=0 ppid=1 pid=418564 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=212 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:00:01.610:2102) : prog-id=231 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:00:01.610:2103) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:00:01.610:2103) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd91ec7dc0 a2=0x78 a3=0x7ffd91ec7dc0 items=0 ppid=1 pid=418564 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=212 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:00:01.610:2103) : prog-id=231 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 08:00:01.665:2104) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 08:00:01.669:2105) : pid=418560 uid=root auid=root ses=211 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:00:01.669:2106) : pid=418573 uid=root auid=root ses=211 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 08:00:01.672:2107) : pid=418560 uid=root auid=root ses=211 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 08:00:11.855:2108) : pid=418566 uid=root auid=root ses=212 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:00:11.856:2109) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:00:11.873:2110) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 08:01:01.544:2111) : pid=418809 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:01:01.545:2112) : pid=418809 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 08:01:01.546:2113) : pid=418809 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=213 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:01:01.546:2113) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 08:01:01.546:2113) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=418809 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=213 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 08:01:01.568:2114) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:01:01.573:2115) : pid=418812 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:01:01.573:2116) : pid=418812 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 08:01:01.573:2117) : pid=418812 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=214 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:01:01.573:2117) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:01:01.573:2117) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=418812 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=214 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 08:01:01.575:2118) : pid=418812 uid=root auid=root ses=214 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 08:01:01.591:2119) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:01:01.591:2119) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff86901f20 a2=0x78 a3=0x7fff86901f20 items=0 ppid=1 pid=418812 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=214 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:01:01.591:2119) : prog-id=232 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:01:01.591:2120) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:01:01.591:2120) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff86901fe0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=418812 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=214 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:01:01.591:2120) : prog-id=232 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:01:01.591:2121) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:01:01.591:2121) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff86901ff0 a2=0x78 a3=0x7fff86901ff0 items=0 ppid=1 pid=418812 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=214 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:01:01.591:2121) : prog-id=233 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:01:01.591:2122) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:01:01.591:2122) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff86901ff0 a2=0x78 a3=0x7fff86901ff0 items=0 ppid=1 pid=418812 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=214 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:01:01.591:2122) : prog-id=233 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 08:01:01.643:2123) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 08:01:01.646:2124) : pid=418809 uid=root auid=root ses=213 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:01:01.647:2125) : pid=418822 uid=root auid=root ses=213 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 08:01:01.649:2126) : pid=418809 uid=root auid=root ses=213 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 08:01:11.857:2127) : pid=418814 uid=root auid=root ses=214 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:01:11.857:2128) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:01:11.871:2129) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 08:10:01.948:2130) : pid=421945 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:10:01.949:2131) : pid=421945 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 08:10:01.950:2132) : pid=421945 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=215 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:10:01.950:2132) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 08:10:01.950:2132) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=421945 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=215 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 08:10:01.969:2133) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:10:01.973:2134) : pid=421948 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:10:01.973:2135) : pid=421948 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 08:10:01.973:2136) : pid=421948 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=216 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:10:01.973:2136) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:10:01.973:2136) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=421948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=216 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 08:10:01.975:2137) : pid=421948 uid=root auid=root ses=216 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 08:10:01.977:2138) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:10:01.977:2138) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff85dc4370 a2=0x78 a3=0x7fff85dc4370 items=0 ppid=1 pid=421948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=216 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:10:01.977:2138) : prog-id=234 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:10:01.978:2139) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:10:01.978:2139) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff85dc4430 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=421948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=216 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:10:01.978:2139) : prog-id=234 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:10:01.978:2140) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:10:01.978:2140) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff85dc4440 a2=0x78 a3=0x7fff85dc4440 items=0 ppid=1 pid=421948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=216 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:10:01.978:2140) : prog-id=235 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:10:01.978:2141) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:10:01.978:2141) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff85dc4440 a2=0x78 a3=0x7fff85dc4440 items=0 ppid=1 pid=421948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=216 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:10:01.978:2141) : prog-id=235 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 08:10:02.024:2142) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 08:10:02.028:2143) : pid=421945 uid=root auid=root ses=215 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:10:02.029:2144) : pid=421957 uid=root auid=root ses=215 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 08:10:02.030:2145) : pid=421945 uid=root auid=root ses=215 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 08:10:12.102:2146) : pid=421950 uid=root auid=root ses=216 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:10:12.102:2147) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:10:12.113:2148) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 08:20:01.431:2149) : pid=425100 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:20:01.431:2150) : pid=425100 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 08:20:01.432:2151) : pid=425100 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=217 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:20:01.432:2151) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 08:20:01.432:2151) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=425100 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=217 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 08:20:01.448:2152) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:20:01.451:2153) : pid=425103 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:20:01.451:2154) : pid=425103 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 08:20:01.451:2155) : pid=425103 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=218 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:20:01.451:2155) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:20:01.451:2155) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=425103 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=218 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 08:20:01.452:2156) : pid=425103 uid=root auid=root ses=218 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 08:20:01.455:2157) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:20:01.455:2157) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc32860ea0 a2=0x78 a3=0x7ffc32860ea0 items=0 ppid=1 pid=425103 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=218 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:20:01.455:2157) : prog-id=236 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:20:01.456:2158) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:20:01.456:2158) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc32860f60 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=425103 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=218 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:20:01.456:2158) : prog-id=236 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:20:01.456:2159) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:20:01.456:2159) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc32860f70 a2=0x78 a3=0x7ffc32860f70 items=0 ppid=1 pid=425103 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=218 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:20:01.456:2159) : prog-id=237 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:20:01.456:2160) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:20:01.456:2160) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc32860f70 a2=0x78 a3=0x7ffc32860f70 items=0 ppid=1 pid=425103 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=218 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:20:01.456:2160) : prog-id=237 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 08:20:01.514:2161) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 08:20:01.517:2162) : pid=425100 uid=root auid=root ses=217 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:20:01.518:2163) : pid=425112 uid=root auid=root ses=217 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 08:20:01.519:2164) : pid=425100 uid=root auid=root ses=217 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 08:20:11.604:2165) : pid=425105 uid=root auid=root ses=218 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:20:11.605:2166) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:20:11.619:2167) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 08:30:01.899:2168) : pid=428489 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:30:01.900:2169) : pid=428489 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 08:30:01.900:2170) : pid=428489 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=219 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:30:01.900:2170) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 08:30:01.900:2170) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=428489 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=219 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 08:30:01.919:2171) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:30:01.922:2172) : pid=428492 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:30:01.922:2173) : pid=428492 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 08:30:01.922:2174) : pid=428492 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=220 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:30:01.922:2174) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:30:01.922:2174) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=428492 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=220 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 08:30:01.923:2175) : pid=428492 uid=root auid=root ses=220 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 08:30:01.927:2176) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:30:01.927:2176) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffede95e590 a2=0x78 a3=0x7ffede95e590 items=0 ppid=1 pid=428492 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=220 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:30:01.927:2176) : prog-id=238 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:30:01.927:2177) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:30:01.927:2177) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffede95e650 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=428492 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=220 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:30:01.927:2177) : prog-id=238 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:30:01.927:2178) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:30:01.927:2178) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffede95e660 a2=0x78 a3=0x7ffede95e660 items=0 ppid=1 pid=428492 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=220 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:30:01.927:2178) : prog-id=239 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:30:01.927:2179) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:30:01.927:2179) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffede95e660 a2=0x78 a3=0x7ffede95e660 items=0 ppid=1 pid=428492 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=220 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:30:01.927:2179) : prog-id=239 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 08:30:01.978:2180) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 08:30:01.981:2181) : pid=428489 uid=root auid=root ses=219 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:30:01.981:2182) : pid=428501 uid=root auid=root ses=219 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 08:30:01.984:2183) : pid=428489 uid=root auid=root ses=219 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 08:30:12.105:2184) : pid=428494 uid=root auid=root ses=220 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:30:12.105:2185) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:30:12.121:2186) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 08:40:01.394:2187) : pid=431899 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:40:01.395:2188) : pid=431899 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 08:40:01.395:2189) : pid=431899 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=221 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:40:01.395:2189) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 08:40:01.395:2189) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=431899 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=221 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 08:40:01.417:2190) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:40:01.421:2191) : pid=431902 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:40:01.421:2192) : pid=431902 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 08:40:01.421:2193) : pid=431902 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=222 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:40:01.421:2193) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:40:01.421:2193) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=431902 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=222 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 08:40:01.423:2194) : pid=431902 uid=root auid=root ses=222 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 08:40:01.438:2195) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:40:01.438:2195) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc3f645ca0 a2=0x78 a3=0x7ffc3f645ca0 items=0 ppid=1 pid=431902 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=222 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:40:01.438:2195) : prog-id=240 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:40:01.438:2196) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:40:01.438:2196) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc3f645d60 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=431902 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=222 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:40:01.438:2196) : prog-id=240 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:40:01.438:2197) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:40:01.438:2197) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc3f645d70 a2=0x78 a3=0x7ffc3f645d70 items=0 ppid=1 pid=431902 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=222 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:40:01.438:2197) : prog-id=241 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:40:01.438:2198) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:40:01.438:2198) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc3f645d70 a2=0x78 a3=0x7ffc3f645d70 items=0 ppid=1 pid=431902 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=222 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:40:01.438:2198) : prog-id=241 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 08:40:01.488:2199) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 08:40:01.497:2200) : pid=431899 uid=root auid=root ses=221 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:40:01.498:2201) : pid=431911 uid=root auid=root ses=221 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 08:40:01.499:2202) : pid=431899 uid=root auid=root ses=221 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:40:11.604:2203) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:40:11.617:2204) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 08:50:01.851:2205) : pid=435190 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:50:01.852:2206) : pid=435190 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 08:50:01.852:2207) : pid=435190 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=223 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:50:01.852:2207) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 08:50:01.852:2207) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=435190 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=223 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 08:50:01.885:2208) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 08:50:01.890:2209) : pid=435193 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:50:01.890:2210) : pid=435193 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 08:50:01.891:2211) : pid=435193 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=224 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 08:50:01.891:2211) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:50:01.891:2211) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=435193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=224 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 08:50:01.891:2212) : pid=435193 uid=root auid=root ses=224 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 08:50:01.895:2213) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:50:01.895:2213) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe323ff9f0 a2=0x78 a3=0x7ffe323ff9f0 items=0 ppid=1 pid=435193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=224 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:50:01.895:2213) : prog-id=242 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:50:01.895:2214) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:50:01.895:2214) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe323ffab0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=435193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=224 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:50:01.895:2214) : prog-id=242 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:50:01.895:2215) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:50:01.895:2215) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe323ffac0 a2=0x78 a3=0x7ffe323ffac0 items=0 ppid=1 pid=435193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=224 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:50:01.895:2215) : prog-id=243 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 08:50:01.896:2216) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 08:50:01.896:2216) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe323ffac0 a2=0x78 a3=0x7ffe323ffac0 items=0 ppid=1 pid=435193 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=224 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 08:50:01.896:2216) : prog-id=243 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 08:50:01.941:2217) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 08:50:01.944:2218) : pid=435190 uid=root auid=root ses=223 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 08:50:01.945:2219) : pid=435202 uid=root auid=root ses=223 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 08:50:01.946:2220) : pid=435190 uid=root auid=root ses=223 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 08:50:12.108:2221) : pid=435195 uid=root auid=root ses=224 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:50:12.109:2222) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 08:50:12.115:2223) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 09:00:01.342:2224) : pid=438556 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:00:01.344:2225) : pid=438556 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 09:00:01.344:2226) : pid=438556 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=225 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:00:01.344:2226) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 09:00:01.344:2226) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=438556 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=225 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 09:00:01.371:2227) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:00:01.376:2228) : pid=438559 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:00:01.376:2229) : pid=438559 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 09:00:01.376:2230) : pid=438559 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=226 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:00:01.376:2230) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:00:01.376:2230) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=438559 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=226 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 09:00:01.378:2231) : pid=438559 uid=root auid=root ses=226 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 09:00:01.382:2232) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:00:01.382:2232) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd80abe230 a2=0x78 a3=0x7ffd80abe230 items=0 ppid=1 pid=438559 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=226 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:00:01.382:2232) : prog-id=244 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:00:01.382:2233) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:00:01.382:2233) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd80abe2f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=438559 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=226 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:00:01.382:2233) : prog-id=244 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:00:01.382:2234) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:00:01.382:2234) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd80abe300 a2=0x78 a3=0x7ffd80abe300 items=0 ppid=1 pid=438559 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=226 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:00:01.382:2234) : prog-id=245 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:00:01.382:2235) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:00:01.382:2235) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd80abe300 a2=0x78 a3=0x7ffd80abe300 items=0 ppid=1 pid=438559 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=226 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:00:01.382:2235) : prog-id=245 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 09:00:01.436:2236) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 09:00:01.440:2237) : pid=438556 uid=root auid=root ses=225 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:00:01.441:2238) : pid=438568 uid=root auid=root ses=225 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 09:00:01.443:2239) : pid=438556 uid=root auid=root ses=225 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 09:00:11.603:2240) : pid=438561 uid=root auid=root ses=226 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:00:11.603:2241) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:00:11.625:2242) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 09:01:01.299:2243) : pid=438887 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:01:01.299:2244) : pid=438887 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 09:01:01.300:2245) : pid=438887 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=227 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:01:01.300:2245) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 09:01:01.300:2245) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=438887 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=227 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 09:01:01.318:2246) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:01:01.321:2247) : pid=438891 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:01:01.322:2248) : pid=438891 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 09:01:01.322:2249) : pid=438891 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=228 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:01:01.322:2249) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:01:01.322:2249) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=438891 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=228 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 09:01:01.322:2250) : pid=438891 uid=root auid=root ses=228 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 09:01:01.325:2251) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:01:01.325:2251) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffde06f4970 a2=0x78 a3=0x7ffde06f4970 items=0 ppid=1 pid=438891 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=228 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:01:01.325:2251) : prog-id=246 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:01:01.325:2252) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:01:01.325:2252) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffde06f4a30 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=438891 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=228 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:01:01.325:2252) : prog-id=246 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:01:01.325:2253) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:01:01.325:2253) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffde06f4a40 a2=0x78 a3=0x7ffde06f4a40 items=0 ppid=1 pid=438891 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=228 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:01:01.325:2253) : prog-id=247 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:01:01.325:2254) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:01:01.325:2254) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffde06f4a40 a2=0x78 a3=0x7ffde06f4a40 items=0 ppid=1 pid=438891 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=228 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:01:01.325:2254) : prog-id=247 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 09:01:01.382:2255) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 09:01:01.386:2256) : pid=438887 uid=root auid=root ses=227 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:01:01.387:2257) : pid=438900 uid=root auid=root ses=227 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 09:01:01.392:2258) : pid=438887 uid=root auid=root ses=227 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:01:11.604:2259) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:01:11.620:2260) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 09:10:01.724:2261) : pid=441895 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:10:01.725:2262) : pid=441895 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 09:10:01.726:2263) : pid=441895 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=229 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:10:01.726:2263) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 09:10:01.726:2263) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=441895 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=229 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 09:10:01.754:2264) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:10:01.758:2265) : pid=441898 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:10:01.758:2266) : pid=441898 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 09:10:01.758:2267) : pid=441898 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=230 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:10:01.758:2267) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:10:01.758:2267) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=441898 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=230 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 09:10:01.760:2268) : pid=441898 uid=root auid=root ses=230 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 09:10:01.765:2269) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:10:01.765:2269) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc3f6a06a0 a2=0x78 a3=0x7ffc3f6a06a0 items=0 ppid=1 pid=441898 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=230 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:10:01.765:2269) : prog-id=248 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:10:01.765:2270) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:10:01.765:2270) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc3f6a0760 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=441898 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=230 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:10:01.765:2270) : prog-id=248 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:10:01.765:2271) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:10:01.765:2271) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc3f6a0770 a2=0x78 a3=0x7ffc3f6a0770 items=0 ppid=1 pid=441898 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=230 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:10:01.765:2271) : prog-id=249 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:10:01.765:2272) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:10:01.765:2272) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc3f6a0770 a2=0x78 a3=0x7ffc3f6a0770 items=0 ppid=1 pid=441898 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=230 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:10:01.765:2272) : prog-id=249 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 09:10:01.819:2273) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 09:10:01.824:2274) : pid=441895 uid=root auid=root ses=229 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:10:01.824:2275) : pid=441907 uid=root auid=root ses=229 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 09:10:01.825:2276) : pid=441895 uid=root auid=root ses=229 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 09:10:11.853:2277) : pid=441900 uid=root auid=root ses=230 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:10:11.854:2278) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:10:11.867:2279) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 09:20:01.161:2280) : pid=445096 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:20:01.162:2281) : pid=445096 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 09:20:01.162:2282) : pid=445096 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=231 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:20:01.162:2282) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 09:20:01.162:2282) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=445096 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=231 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 09:20:01.182:2283) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:20:01.186:2284) : pid=445099 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:20:01.186:2285) : pid=445099 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 09:20:01.186:2286) : pid=445099 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=232 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:20:01.186:2286) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:20:01.186:2286) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=445099 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=232 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 09:20:01.187:2287) : pid=445099 uid=root auid=root ses=232 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 09:20:01.191:2288) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:20:01.191:2288) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe7cedb760 a2=0x78 a3=0x7ffe7cedb760 items=0 ppid=1 pid=445099 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=232 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:20:01.191:2288) : prog-id=250 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:20:01.191:2289) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:20:01.191:2289) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe7cedb820 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=445099 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=232 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:20:01.191:2289) : prog-id=250 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:20:01.191:2290) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:20:01.191:2290) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe7cedb830 a2=0x78 a3=0x7ffe7cedb830 items=0 ppid=1 pid=445099 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=232 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:20:01.191:2290) : prog-id=251 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:20:01.191:2291) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:20:01.191:2291) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe7cedb830 a2=0x78 a3=0x7ffe7cedb830 items=0 ppid=1 pid=445099 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=232 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:20:01.191:2291) : prog-id=251 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 09:20:01.245:2292) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 09:20:01.248:2293) : pid=445096 uid=root auid=root ses=231 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:20:01.248:2294) : pid=445108 uid=root auid=root ses=231 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 09:20:01.250:2295) : pid=445096 uid=root auid=root ses=231 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 09:20:11.356:2296) : pid=445101 uid=root auid=root ses=232 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:20:11.357:2297) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:20:11.369:2298) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 09:30:01.648:2299) : pid=448544 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:30:01.649:2300) : pid=448544 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 09:30:01.649:2301) : pid=448544 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=233 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:30:01.649:2301) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 09:30:01.649:2301) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=448544 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=233 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 09:30:01.671:2302) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:30:01.673:2303) : pid=448547 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:30:01.673:2304) : pid=448547 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 09:30:01.675:2305) : pid=448547 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=234 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:30:01.675:2305) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:30:01.675:2305) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=448547 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=234 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 09:30:01.675:2306) : pid=448547 uid=root auid=root ses=234 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 09:30:01.694:2307) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:30:01.694:2307) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc9293c450 a2=0x78 a3=0x7ffc9293c450 items=0 ppid=1 pid=448547 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=234 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:30:01.694:2307) : prog-id=252 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:30:01.694:2308) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:30:01.694:2308) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc9293c510 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=448547 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=234 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:30:01.694:2308) : prog-id=252 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:30:01.694:2309) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:30:01.694:2309) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc9293c520 a2=0x78 a3=0x7ffc9293c520 items=0 ppid=1 pid=448547 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=234 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:30:01.694:2309) : prog-id=253 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:30:01.694:2310) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:30:01.694:2310) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc9293c520 a2=0x78 a3=0x7ffc9293c520 items=0 ppid=1 pid=448547 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=234 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:30:01.694:2310) : prog-id=253 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 09:30:01.761:2311) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 09:30:01.765:2312) : pid=448544 uid=root auid=root ses=233 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:30:01.766:2313) : pid=448556 uid=root auid=root ses=233 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 09:30:01.767:2314) : pid=448544 uid=root auid=root ses=233 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 09:30:11.854:2315) : pid=448549 uid=root auid=root ses=234 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:30:11.854:2316) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:30:11.873:2317) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 09:40:01.096:2318) : pid=451547 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:40:01.097:2319) : pid=451547 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 09:40:01.097:2320) : pid=451547 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=235 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:40:01.097:2320) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 09:40:01.097:2320) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=451547 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=235 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 09:40:01.117:2321) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:40:01.121:2322) : pid=451550 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:40:01.121:2323) : pid=451550 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 09:40:01.121:2324) : pid=451550 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=236 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:40:01.121:2324) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:40:01.121:2324) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=451550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=236 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 09:40:01.121:2325) : pid=451550 uid=root auid=root ses=236 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 09:40:01.126:2326) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:40:01.126:2326) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe7cf45e20 a2=0x78 a3=0x7ffe7cf45e20 items=0 ppid=1 pid=451550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=236 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:40:01.126:2326) : prog-id=254 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:40:01.126:2327) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:40:01.126:2327) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe7cf45ee0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=451550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=236 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:40:01.126:2327) : prog-id=254 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:40:01.126:2328) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:40:01.126:2328) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe7cf45ef0 a2=0x78 a3=0x7ffe7cf45ef0 items=0 ppid=1 pid=451550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=236 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:40:01.126:2328) : prog-id=255 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:40:01.126:2329) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:40:01.126:2329) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe7cf45ef0 a2=0x78 a3=0x7ffe7cf45ef0 items=0 ppid=1 pid=451550 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=236 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:40:01.126:2329) : prog-id=255 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 09:40:01.167:2330) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 09:40:01.170:2331) : pid=451547 uid=root auid=root ses=235 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:40:01.171:2332) : pid=451559 uid=root auid=root ses=235 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 09:40:01.172:2333) : pid=451547 uid=root auid=root ses=235 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 09:40:11.356:2334) : pid=451552 uid=root auid=root ses=236 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:40:11.357:2335) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:40:11.367:2336) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 09:50:01.583:2337) : pid=454392 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:50:01.583:2338) : pid=454392 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 09:50:01.583:2339) : pid=454392 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=237 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:50:01.583:2339) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 09:50:01.583:2339) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=454392 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=237 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 09:50:01.602:2340) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 09:50:01.607:2341) : pid=454395 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:50:01.607:2342) : pid=454395 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 09:50:01.607:2343) : pid=454395 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=238 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 09:50:01.607:2343) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:50:01.607:2343) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=454395 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=238 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 09:50:01.609:2344) : pid=454395 uid=root auid=root ses=238 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 09:50:01.615:2345) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:50:01.615:2345) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdbb963d40 a2=0x78 a3=0x7ffdbb963d40 items=0 ppid=1 pid=454395 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=238 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:50:01.615:2345) : prog-id=256 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:50:01.615:2346) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:50:01.615:2346) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdbb963e00 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=454395 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=238 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:50:01.615:2346) : prog-id=256 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:50:01.615:2347) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:50:01.615:2347) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdbb963e10 a2=0x78 a3=0x7ffdbb963e10 items=0 ppid=1 pid=454395 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=238 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:50:01.615:2347) : prog-id=257 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 09:50:01.615:2348) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 09:50:01.615:2348) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdbb963e10 a2=0x78 a3=0x7ffdbb963e10 items=0 ppid=1 pid=454395 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=238 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 09:50:01.615:2348) : prog-id=257 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 09:50:01.678:2349) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 09:50:01.682:2350) : pid=454392 uid=root auid=root ses=237 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 09:50:01.683:2351) : pid=454404 uid=root auid=root ses=237 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 09:50:01.684:2352) : pid=454392 uid=root auid=root ses=237 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 09:50:11.855:2353) : pid=454397 uid=root auid=root ses=238 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:50:11.856:2354) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 09:50:11.873:2355) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:00:01.061:2356) : pid=457391 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:00:01.062:2357) : pid=457391 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:00:01.063:2358) : pid=457391 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=239 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:00:01.063:2358) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 10:00:01.063:2358) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=457391 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=239 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 10:00:01.078:2359) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:00:01.082:2360) : pid=457394 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:00:01.082:2361) : pid=457394 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 10:00:01.082:2362) : pid=457394 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=240 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:00:01.082:2362) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:00:01.082:2362) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=457394 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=240 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:00:01.082:2363) : pid=457394 uid=root auid=root ses=240 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 10:00:01.087:2364) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:00:01.087:2364) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe3400c0c0 a2=0x78 a3=0x7ffe3400c0c0 items=0 ppid=1 pid=457394 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=240 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:00:01.087:2364) : prog-id=258 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:00:01.087:2365) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:00:01.087:2365) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe3400c180 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=457394 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=240 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:00:01.087:2365) : prog-id=258 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:00:01.087:2366) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:00:01.087:2366) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe3400c190 a2=0x78 a3=0x7ffe3400c190 items=0 ppid=1 pid=457394 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=240 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:00:01.087:2366) : prog-id=259 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:00:01.087:2367) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:00:01.087:2367) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe3400c190 a2=0x78 a3=0x7ffe3400c190 items=0 ppid=1 pid=457394 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=240 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:00:01.087:2367) : prog-id=259 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 10:00:01.136:2368) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 10:00:01.141:2369) : pid=457391 uid=root auid=root ses=239 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:00:01.142:2370) : pid=457403 uid=root auid=root ses=239 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 10:00:01.144:2371) : pid=457391 uid=root auid=root ses=239 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 10:00:11.352:2372) : pid=457396 uid=root auid=root ses=240 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:00:11.352:2373) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:00:11.364:2374) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:01:01.034:2375) : pid=457588 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:01:01.035:2376) : pid=457588 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:01:01.035:2377) : pid=457588 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=241 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:01:01.035:2377) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 10:01:01.035:2377) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=457588 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=241 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 10:01:01.055:2378) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:01:01.059:2379) : pid=457591 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:01:01.059:2380) : pid=457591 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 10:01:01.059:2381) : pid=457591 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=242 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:01:01.059:2381) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:01:01.059:2381) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=457591 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=242 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:01:01.061:2382) : pid=457591 uid=root auid=root ses=242 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 10:01:01.084:2383) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:01:01.084:2383) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd24ff6690 a2=0x78 a3=0x7ffd24ff6690 items=0 ppid=1 pid=457591 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=242 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:01:01.084:2383) : prog-id=260 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:01:01.084:2384) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:01:01.084:2384) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd24ff6750 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=457591 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=242 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:01:01.084:2384) : prog-id=260 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:01:01.084:2385) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:01:01.084:2385) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd24ff6760 a2=0x78 a3=0x7ffd24ff6760 items=0 ppid=1 pid=457591 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=242 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:01:01.084:2385) : prog-id=261 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:01:01.084:2386) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:01:01.084:2386) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd24ff6760 a2=0x78 a3=0x7ffd24ff6760 items=0 ppid=1 pid=457591 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=242 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:01:01.084:2386) : prog-id=261 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 10:01:01.130:2387) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 10:01:01.131:2388) : pid=457588 uid=root auid=root ses=241 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:01:01.133:2389) : pid=457600 uid=root auid=root ses=241 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 10:01:01.135:2390) : pid=457588 uid=root auid=root ses=241 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 10:01:11.356:2391) : pid=457593 uid=root auid=root ses=242 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:01:11.356:2392) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:01:11.370:2393) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:10:01.447:2394) : pid=460372 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:10:01.448:2395) : pid=460372 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:10:01.448:2396) : pid=460372 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=243 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:10:01.448:2396) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 10:10:01.448:2396) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=460372 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=243 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 10:10:01.464:2397) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:10:01.469:2398) : pid=460375 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:10:01.469:2399) : pid=460375 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 10:10:01.469:2400) : pid=460375 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=244 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:10:01.469:2400) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:10:01.469:2400) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=460375 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=244 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:10:01.470:2401) : pid=460375 uid=root auid=root ses=244 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 10:10:01.476:2402) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:10:01.476:2402) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffccda1de00 a2=0x78 a3=0x7ffccda1de00 items=0 ppid=1 pid=460375 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=244 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:10:01.476:2402) : prog-id=262 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:10:01.476:2403) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:10:01.476:2403) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffccda1dec0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=460375 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=244 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:10:01.476:2403) : prog-id=262 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:10:01.476:2404) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:10:01.476:2404) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffccda1ded0 a2=0x78 a3=0x7ffccda1ded0 items=0 ppid=1 pid=460375 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=244 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:10:01.476:2404) : prog-id=263 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:10:01.476:2405) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:10:01.476:2405) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffccda1ded0 a2=0x78 a3=0x7ffccda1ded0 items=0 ppid=1 pid=460375 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=244 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:10:01.476:2405) : prog-id=263 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 10:10:01.542:2406) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 10:10:01.545:2407) : pid=460372 uid=root auid=root ses=243 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:10:01.546:2408) : pid=460384 uid=root auid=root ses=243 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 10:10:01.548:2409) : pid=460372 uid=root auid=root ses=243 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 10:10:11.604:2410) : pid=460377 uid=root auid=root ses=244 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:10:11.605:2411) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:10:11.624:2412) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:20:01.903:2413) : pid=463070 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:20:01.904:2414) : pid=463070 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:20:01.904:2415) : pid=463070 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=245 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:20:01.904:2415) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 10:20:01.904:2415) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=463070 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=245 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 10:20:01.922:2416) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:20:01.927:2417) : pid=463073 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:20:01.927:2418) : pid=463073 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 10:20:01.927:2419) : pid=463073 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=246 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:20:01.927:2419) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:20:01.927:2419) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=463073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=246 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:20:01.929:2420) : pid=463073 uid=root auid=root ses=246 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 10:20:01.936:2421) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:20:01.936:2421) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdabbab090 a2=0x78 a3=0x7ffdabbab090 items=0 ppid=1 pid=463073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=246 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:20:01.936:2421) : prog-id=264 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:20:01.936:2422) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:20:01.936:2422) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdabbab150 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=463073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=246 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:20:01.936:2422) : prog-id=264 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:20:01.936:2423) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:20:01.936:2423) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdabbab160 a2=0x78 a3=0x7ffdabbab160 items=0 ppid=1 pid=463073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=246 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:20:01.936:2423) : prog-id=265 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:20:01.936:2424) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:20:01.936:2424) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdabbab160 a2=0x78 a3=0x7ffdabbab160 items=0 ppid=1 pid=463073 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=246 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:20:01.936:2424) : prog-id=265 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 10:20:02.003:2425) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 10:20:02.020:2426) : pid=463070 uid=root auid=root ses=245 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:20:02.021:2427) : pid=463082 uid=root auid=root ses=245 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 10:20:02.023:2428) : pid=463070 uid=root auid=root ses=245 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 10:20:12.104:2429) : pid=463075 uid=root auid=root ses=246 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:20:12.104:2430) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:20:12.115:2431) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:30:01.370:2432) : pid=466025 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:30:01.372:2433) : pid=466025 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:30:01.372:2434) : pid=466025 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=247 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:30:01.372:2434) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 10:30:01.372:2434) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=466025 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=247 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 10:30:01.392:2435) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:30:01.396:2436) : pid=466028 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:30:01.396:2437) : pid=466028 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 10:30:01.396:2438) : pid=466028 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=248 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:30:01.396:2438) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:30:01.396:2438) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=466028 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=248 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:30:01.397:2439) : pid=466028 uid=root auid=root ses=248 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 10:30:01.410:2440) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:30:01.410:2440) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef83b19b0 a2=0x78 a3=0x7ffef83b19b0 items=0 ppid=1 pid=466028 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=248 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:30:01.410:2440) : prog-id=266 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:30:01.410:2441) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:30:01.410:2441) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef83b1a70 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=466028 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=248 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:30:01.410:2441) : prog-id=266 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:30:01.410:2442) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:30:01.410:2442) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef83b1a80 a2=0x78 a3=0x7ffef83b1a80 items=0 ppid=1 pid=466028 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=248 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:30:01.410:2442) : prog-id=267 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:30:01.410:2443) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:30:01.410:2443) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef83b1a80 a2=0x78 a3=0x7ffef83b1a80 items=0 ppid=1 pid=466028 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=248 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:30:01.410:2443) : prog-id=267 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 10:30:01.459:2444) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 10:30:01.464:2445) : pid=466025 uid=root auid=root ses=247 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:30:01.465:2446) : pid=466038 uid=root auid=root ses=247 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 10:30:01.466:2447) : pid=466025 uid=root auid=root ses=247 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 10:30:11.605:2448) : pid=466030 uid=root auid=root ses=248 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:30:11.606:2449) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:30:11.615:2450) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:40:01.846:2451) : pid=469206 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:40:01.847:2452) : pid=469206 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:40:01.847:2453) : pid=469206 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=249 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:40:01.847:2453) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 10:40:01.847:2453) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=469206 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=249 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 10:40:01.864:2454) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:40:01.867:2455) : pid=469209 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:40:01.867:2456) : pid=469209 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 10:40:01.868:2457) : pid=469209 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=250 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:40:01.868:2457) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:40:01.868:2457) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=469209 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=250 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:40:01.869:2458) : pid=469209 uid=root auid=root ses=250 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 10:40:01.882:2459) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:40:01.882:2459) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe641c9120 a2=0x78 a3=0x7ffe641c9120 items=0 ppid=1 pid=469209 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=250 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:40:01.882:2459) : prog-id=268 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:40:01.882:2460) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:40:01.882:2460) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe641c91e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=469209 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=250 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:40:01.882:2460) : prog-id=268 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:40:01.882:2461) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:40:01.882:2461) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe641c91f0 a2=0x78 a3=0x7ffe641c91f0 items=0 ppid=1 pid=469209 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=250 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:40:01.882:2461) : prog-id=269 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:40:01.882:2462) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:40:01.882:2462) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe641c91f0 a2=0x78 a3=0x7ffe641c91f0 items=0 ppid=1 pid=469209 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=250 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:40:01.882:2462) : prog-id=269 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 10:40:01.933:2463) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 10:40:01.937:2464) : pid=469206 uid=root auid=root ses=249 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:40:01.938:2465) : pid=469218 uid=root auid=root ses=249 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 10:40:01.940:2466) : pid=469206 uid=root auid=root ses=249 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:40:12.102:2467) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:40:12.117:2468) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:47:37.682:2469) : pid=471345 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:47:37.697:2470) : pid=471345 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:47:37.699:2471) : pid=471345 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:47:37.700:2472) : pid=471345 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=251 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:47:37.700:2472) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(13.03.2026 10:47:37.700:2472) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffcf78799b0 a2=0x3 a3=0x7f688af09459 items=0 ppid=2876 pid=471345 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=251 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:47:37.725:2473) : pid=471345 uid=root auid=datapk ses=251 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:47:37.727:2474) : pid=471362 uid=root auid=datapk ses=251 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:47:37.789:2475) : pid=471361 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:47:37.803:2476) : pid=471361 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:47:37.804:2477) : pid=471361 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:47:37.804:2478) : pid=471361 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=252 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:47:37.804:2478) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(13.03.2026 10:47:37.804:2478) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffc16277330 a2=0x3 a3=0x7efe59878459 items=0 ppid=2876 pid=471361 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=252 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:47:37.818:2479) : pid=471361 uid=root auid=datapk ses=252 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:47:37.819:2480) : pid=471367 uid=root auid=datapk ses=252 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_LOGIN msg=audit(13.03.2026 10:47:40.149:2481) : pid=471345 uid=root auid=datapk ses=251 msg='op=login id=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=/dev/pts/1 res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:47:45.911:2482) : pid=471423 uid=datapk auid=datapk ses=251 msg='op=PAM:authentication grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:47:45.912:2483) : pid=471423 uid=datapk auid=datapk ses=251 msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=USER_START msg=audit(13.03.2026 10:47:45.912:2484) : pid=471423 uid=datapk auid=datapk ses=251 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:47:45.912:2485) : pid=471423 uid=datapk auid=datapk ses=251 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/1 res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 10:50:01.339:2486) : pid=473165 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:50:01.339:2487) : pid=473165 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 10:50:01.339:2488) : pid=473165 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=253 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:50:01.339:2488) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 10:50:01.339:2488) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=473165 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=253 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 10:50:01.360:2489) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 10:50:01.364:2490) : pid=473168 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:50:01.364:2491) : pid=473168 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 10:50:01.364:2492) : pid=473168 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=254 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 10:50:01.364:2492) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:50:01.364:2492) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=473168 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=254 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 10:50:01.366:2493) : pid=473168 uid=root auid=root ses=254 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 10:50:01.377:2494) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:50:01.377:2494) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdfe8768d0 a2=0x78 a3=0x7ffdfe8768d0 items=0 ppid=1 pid=473168 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=254 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:50:01.377:2494) : prog-id=270 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:50:01.377:2495) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:50:01.377:2495) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdfe876990 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=473168 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=254 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:50:01.377:2495) : prog-id=270 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:50:01.377:2496) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:50:01.377:2496) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdfe8769a0 a2=0x78 a3=0x7ffdfe8769a0 items=0 ppid=1 pid=473168 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=254 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:50:01.377:2496) : prog-id=271 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 10:50:01.377:2497) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 10:50:01.377:2497) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdfe8769a0 a2=0x78 a3=0x7ffdfe8769a0 items=0 ppid=1 pid=473168 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=254 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 10:50:01.377:2497) : prog-id=271 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 10:50:01.418:2498) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 10:50:01.421:2499) : pid=473165 uid=root auid=root ses=253 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 10:50:01.422:2500) : pid=473177 uid=root auid=root ses=253 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 10:50:01.423:2501) : pid=473165 uid=root auid=root ses=253 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 10:50:11.608:2502) : pid=473170 uid=root auid=root ses=254 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:50:11.609:2503) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 10:50:11.633:2504) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 11:00:01.827:2505) : pid=480375 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:00:01.828:2506) : pid=480375 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 11:00:01.828:2507) : pid=480375 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=255 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:00:01.828:2507) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 11:00:01.828:2507) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=480375 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=255 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 11:00:01.850:2508) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:00:01.855:2509) : pid=480378 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:00:01.855:2510) : pid=480378 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 11:00:01.855:2511) : pid=480378 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=256 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:00:01.855:2511) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:00:01.855:2511) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=480378 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=256 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 11:00:01.856:2512) : pid=480378 uid=root auid=root ses=256 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 11:00:01.872:2513) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:00:01.872:2513) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffca6eacb00 a2=0x78 a3=0x7ffca6eacb00 items=0 ppid=1 pid=480378 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=256 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:00:01.872:2513) : prog-id=272 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:00:01.872:2514) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:00:01.872:2514) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffca6eacbc0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=480378 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=256 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:00:01.872:2514) : prog-id=272 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:00:01.872:2515) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:00:01.872:2515) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffca6eacbd0 a2=0x78 a3=0x7ffca6eacbd0 items=0 ppid=1 pid=480378 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=256 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:00:01.872:2515) : prog-id=273 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:00:01.872:2516) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:00:01.872:2516) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffca6eacbd0 a2=0x78 a3=0x7ffca6eacbd0 items=0 ppid=1 pid=480378 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=256 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:00:01.872:2516) : prog-id=273 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:00:01.918:2517) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 11:00:01.922:2518) : pid=480375 uid=root auid=root ses=255 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:00:01.923:2519) : pid=480387 uid=root auid=root ses=255 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 11:00:01.925:2520) : pid=480375 uid=root auid=root ses=255 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 11:00:12.109:2521) : pid=480380 uid=root auid=root ses=256 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:00:12.109:2522) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:00:12.125:2523) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 11:01:01.785:2524) : pid=481053 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:01:01.786:2525) : pid=481053 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 11:01:01.786:2526) : pid=481053 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=257 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:01:01.786:2526) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 11:01:01.786:2526) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=481053 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=257 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 11:01:01.805:2527) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:01:01.808:2528) : pid=481056 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:01:01.808:2529) : pid=481056 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 11:01:01.809:2530) : pid=481056 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=258 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:01:01.809:2530) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:01:01.809:2530) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=481056 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=258 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 11:01:01.809:2531) : pid=481056 uid=root auid=root ses=258 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 11:01:01.825:2532) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:01:01.825:2532) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffea79f9570 a2=0x78 a3=0x7ffea79f9570 items=0 ppid=1 pid=481056 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=258 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:01:01.825:2532) : prog-id=274 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:01:01.825:2533) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:01:01.825:2533) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffea79f9630 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=481056 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=258 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:01:01.825:2533) : prog-id=274 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:01:01.825:2534) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:01:01.825:2534) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffea79f9640 a2=0x78 a3=0x7ffea79f9640 items=0 ppid=1 pid=481056 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=258 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:01:01.825:2534) : prog-id=275 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:01:01.825:2535) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:01:01.825:2535) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffea79f9640 a2=0x78 a3=0x7ffea79f9640 items=0 ppid=1 pid=481056 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=258 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:01:01.825:2535) : prog-id=275 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:01:01.876:2536) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 11:01:01.894:2537) : pid=481053 uid=root auid=root ses=257 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:01:01.894:2538) : pid=481067 uid=root auid=root ses=257 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 11:01:01.898:2539) : pid=481053 uid=root auid=root ses=257 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 11:01:12.102:2540) : pid=481058 uid=root auid=root ses=258 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:01:12.102:2541) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:01:12.111:2542) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 11:10:01.177:2543) : pid=487329 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:10:01.178:2544) : pid=487329 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 11:10:01.178:2545) : pid=487329 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=259 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:10:01.178:2545) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 11:10:01.178:2545) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=487329 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=259 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 11:10:01.198:2546) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:10:01.203:2547) : pid=487332 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:10:01.203:2548) : pid=487332 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 11:10:01.203:2549) : pid=487332 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=260 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:10:01.203:2549) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:10:01.203:2549) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=487332 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=260 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 11:10:01.204:2550) : pid=487332 uid=root auid=root ses=260 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 11:10:01.209:2551) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:10:01.209:2551) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff42321320 a2=0x78 a3=0x7fff42321320 items=0 ppid=1 pid=487332 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=260 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:10:01.209:2551) : prog-id=276 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:10:01.209:2552) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:10:01.209:2552) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff423213e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=487332 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=260 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:10:01.209:2552) : prog-id=276 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:10:01.209:2553) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:10:01.209:2553) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff423213f0 a2=0x78 a3=0x7fff423213f0 items=0 ppid=1 pid=487332 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=260 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:10:01.209:2553) : prog-id=277 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:10:01.209:2554) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:10:01.209:2554) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff423213f0 a2=0x78 a3=0x7fff423213f0 items=0 ppid=1 pid=487332 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=260 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:10:01.209:2554) : prog-id=277 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:10:01.260:2555) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 11:10:01.263:2556) : pid=487329 uid=root auid=root ses=259 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:10:01.264:2557) : pid=487341 uid=root auid=root ses=259 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 11:10:01.265:2558) : pid=487329 uid=root auid=root ses=259 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 11:10:11.355:2559) : pid=487334 uid=root auid=root ses=260 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:10:11.356:2560) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:10:11.368:2561) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:23.876:2562) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:23.887:2563) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:23.933:2564) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:23.943:2565) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.055:2566) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.255:2567) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:17:24.294:2568) : prog-id=19 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.354:2569) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:17:24.358:2570) : prog-id=16 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.376:2571) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.493:2572) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.540:2573) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.732:2574) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.832:2575) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.940:2576) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:24.941:2577) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.083:2578) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.233:2579) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.275:2580) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.348:2581) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.349:2582) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.349:2583) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.396:2584) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.397:2585) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.405:2586) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.468:2587) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.469:2588) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.605:2589) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.655:2590) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.673:2591) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.716:2592) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.716:2593) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.735:2594) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.754:2595) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.791:2596) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.791:2597) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.792:2598) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.813:2599) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.825:2600) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.910:2601) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:25.953:2602) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.100:2603) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.101:2604) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.211:2605) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.220:2606) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.221:2607) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.296:2608) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.296:2609) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.297:2610) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.297:2611) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.307:2612) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-dashboards comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.313:2613) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.344:2614) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:17:26.351:2615) : prog-id=18 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.357:2616) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-esper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.386:2617) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:17:26.391:2618) : prog-id=17 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.427:2619) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.462:2620) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-controller comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.511:2621) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.514:2622) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.600:2623) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.681:2624) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.720:2625) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.750:2626) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:26.796:2627) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:27.148:2628) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:27.171:2629) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:27.198:2630) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:27.326:2631) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:27.730:2632) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-logstash comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:28.117:2633) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:28.211:2634) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:28.455:2635) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:28.458:2636) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:17:28.459:2637) : prog-id=22 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:28.995:2638) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:29.832:2639) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:30.289:2640) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:54.972:2641) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:17:54.977:2642) : prog-id=25 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:54.977:2643) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:17:57.986:2644) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:13.046:2645) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:13.308:2646) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-mariadb comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:18:13.313:2647) : prog-id=21 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:24.382:2648) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:24.665:2649) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:24.779:2650) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:24.784:2651) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-postgresql comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:18:24.785:2652) : prog-id=20 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:26.335:2653) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:26.340:2654) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:53.885:2655) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:54.053:2656) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:54.056:2657) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:18:54.061:2658) : prog-id=23 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:55.436:2659) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:18:55.440:2660) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 11:20:01.602:2661) : pid=494496 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:20:01.603:2662) : pid=494496 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 11:20:01.603:2663) : pid=494496 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=261 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:20:01.603:2663) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 11:20:01.603:2663) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=494496 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=261 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:01.625:2664) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:20:01.628:2665) : pid=494499 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:20:01.628:2666) : pid=494499 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 11:20:01.628:2667) : pid=494499 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=262 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:20:01.628:2667) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:20:01.628:2667) : arch=x86_64 syscall=write success=yes exit=1 a0=0x7 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=494499 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=262 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 11:20:01.630:2668) : pid=494499 uid=root auid=root ses=262 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 11:20:01.633:2669) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:20:01.633:2669) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe67d31ba0 a2=0x78 a3=0x7ffe67d31ba0 items=0 ppid=1 pid=494499 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=262 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:20:01.633:2669) : prog-id=278 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:20:01.633:2670) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:20:01.633:2670) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe67d31c60 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=494499 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=262 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:20:01.633:2670) : prog-id=278 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:20:01.634:2671) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:20:01.634:2671) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe67d31c70 a2=0x78 a3=0x7ffe67d31c70 items=0 ppid=1 pid=494499 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=262 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:20:01.634:2671) : prog-id=279 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:20:01.634:2672) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:20:01.634:2672) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe67d31c70 a2=0x78 a3=0x7ffe67d31c70 items=0 ppid=1 pid=494499 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=262 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:20:01.634:2672) : prog-id=279 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:01.692:2673) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 11:20:01.697:2674) : pid=494496 uid=root auid=root ses=261 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:20:01.698:2675) : pid=494508 uid=root auid=root ses=261 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 11:20:01.700:2676) : pid=494496 uid=root auid=root ses=261 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 11:20:11.857:2677) : pid=494501 uid=root auid=root ses=262 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:20:11.857:2678) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:20:11.871:2679) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:20:28.378:2680) : prog-id=280 op=LOAD 
----
type=BPF msg=audit(13.03.2026 11:20:28.411:2681) : prog-id=281 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.453:2682) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.467:2683) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:20:28.509:2684) : prog-id=282 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.641:2685) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.718:2686) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.759:2687) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-postgresql comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.759:2688) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.768:2689) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.816:2690) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:20:28.850:2691) : prog-id=283 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.868:2692) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:28.965:2693) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:29.125:2694) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:29.229:2695) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:29.417:2696) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:20:29.423:2697) : prog-id=284 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:29.754:2698) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:29.919:2699) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:20:29.937:2700) : prog-id=285 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:29.948:2701) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.042:2702) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.042:2703) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.087:2704) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:20:30.156:2705) : prog-id=286 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.180:2706) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.264:2707) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:20:30.265:2708) : prog-id=287 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.705:2709) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.922:2710) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.964:2711) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:30.972:2712) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:31.173:2713) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:31.278:2714) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:31.361:2715) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:31.413:2716) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:31.509:2717) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:31.530:2718) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.048:2719) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.174:2720) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.302:2721) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.396:2722) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.561:2723) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.790:2724) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.799:2725) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.951:2726) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-mariadb comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:32.998:2727) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:33.310:2728) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:33.699:2729) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:33.839:2730) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:35.902:2731) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:36.915:2732) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:44.762:2733) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:44.786:2734) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:45.305:2735) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:45.469:2736) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:45.501:2737) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:45.512:2738) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:45.526:2739) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:20:45.526:2740) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:45.764:2741) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:45.893:2742) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:46.040:2743) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:46.199:2744) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:46.225:2745) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:46.314:2746) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:47.653:2747) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:48.342:2748) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:48.388:2749) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:48.423:2750) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:48.485:2751) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:48.654:2752) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:48.937:2753) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:48.986:2754) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:49.620:2755) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:50.359:2756) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:50.375:2757) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:50.454:2758) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:50.778:2759) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:50.905:2760) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:50.945:2761) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:51.009:2762) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:51.247:2763) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:51.667:2764) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:51.698:2765) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:51.849:2766) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:51.876:2767) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:51.971:2768) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:51.972:2769) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:20:52.134:2770) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:52.439:2771) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:53.144:2772) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:53.154:2773) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-logstash comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:53.205:2774) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-dashboards comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:53.330:2775) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:53.604:2776) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-esper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:54.139:2777) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-controller comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:20:56.531:2778) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:21:00.561:2779) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:21:10.599:2780) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:21:10.600:2781) : prog-id=288 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:21:10.609:2782) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.373:2783) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.379:2784) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.432:2785) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.438:2786) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.470:2787) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:26:53.472:2788) : prog-id=281 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.523:2789) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.596:2790) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.685:2791) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:26:53.695:2792) : prog-id=283 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.895:2793) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.927:2794) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:53.960:2795) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.004:2796) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.028:2797) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.079:2798) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.107:2799) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.119:2800) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.133:2801) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.134:2802) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.215:2803) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.239:2804) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.269:2805) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.298:2806) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.367:2807) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.385:2808) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-dashboards comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.401:2809) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.428:2810) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.434:2811) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.451:2812) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.461:2813) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.471:2814) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-esper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.498:2815) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.515:2816) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:26:54.520:2817) : prog-id=285 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.574:2818) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:26:54.585:2819) : prog-id=286 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.607:2820) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.618:2821) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.637:2822) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.703:2823) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.704:2824) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.755:2825) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.795:2826) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.814:2827) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.814:2828) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.846:2829) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.873:2830) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.877:2831) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.893:2832) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-controller comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.933:2833) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:54.981:2834) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.002:2835) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.127:2836) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.153:2837) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.162:2838) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.180:2839) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.182:2840) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.186:2841) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.191:2842) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.193:2843) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.239:2844) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.240:2845) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.272:2846) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.325:2847) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.425:2848) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.536:2849) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.542:2850) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.669:2851) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:26:55.674:2852) : prog-id=287 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.674:2853) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:55.760:2854) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:56.335:2855) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-logstash comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:56.542:2856) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:56.566:2857) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:56.587:2858) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:56.749:2859) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:26:58.512:2860) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:00.065:2861) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:23.880:2862) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:23.882:2863) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:27:23.890:2864) : prog-id=288 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:28.916:2865) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:53.597:2866) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:53.720:2867) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:53.827:2868) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-mariadb comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:27:53.833:2869) : prog-id=282 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:53.925:2870) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:54.006:2871) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:27:54.011:2872) : prog-id=280 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:54.039:2873) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-postgresql comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:55.402:2874) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:27:55.404:2875) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:28:23.366:2876) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:28:23.484:2877) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:28:23.488:2878) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:28:23.492:2879) : prog-id=284 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:28:24.824:2880) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:28:24.828:2881) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:29:33.924:2882) : prog-id=289 op=LOAD 
----
type=BPF msg=audit(13.03.2026 11:29:33.942:2883) : prog-id=290 op=LOAD 
----
type=BPF msg=audit(13.03.2026 11:29:33.966:2884) : prog-id=291 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:33.976:2885) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:33.982:2886) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.063:2887) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:29:34.108:2888) : prog-id=292 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.116:2889) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.176:2890) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.305:2891) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-postgresql comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.306:2892) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.414:2893) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.428:2894) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.434:2895) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.460:2896) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.558:2897) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:29:34.559:2898) : prog-id=293 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.581:2899) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.731:2900) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.746:2901) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.795:2902) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.871:2903) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.909:2904) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:34.936:2905) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:29:35.044:2906) : prog-id=294 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.053:2907) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:29:35.123:2908) : prog-id=295 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.128:2909) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:29:35.165:2910) : prog-id=296 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.394:2911) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.627:2912) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.642:2913) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.676:2914) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.751:2915) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.858:2916) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.886:2917) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.887:2918) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:35.917:2919) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:36.050:2920) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:36.279:2921) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:36.283:2922) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:36.440:2923) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:36.657:2924) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:36.696:2925) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:36.764:2926) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:37.039:2927) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:37.191:2928) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-mariadb comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:37.250:2929) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:37.274:2930) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:37.555:2931) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:37.707:2932) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:39.093:2933) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:40.122:2934) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:29:44.262:2935) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:44.269:2936) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:45.034:2937) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:45.082:2938) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:45.768:2939) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:45.799:2940) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:45.862:2941) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:45.929:2942) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:29:45.929:2943) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:45.990:2944) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:46.122:2945) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:46.291:2946) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:46.654:2947) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:46.675:2948) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:46.922:2949) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:47.411:2950) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:47.421:2951) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:49.093:2952) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:49.833:2953) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:51.969:2954) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:52.571:2955) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:52.966:2956) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:53.209:2957) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:53.332:2958) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:54.146:2959) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:54.762:2960) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:55.152:2961) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:55.439:2962) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:55.485:2963) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:55.906:2964) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:56.071:2965) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:56.101:2966) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:56.463:2967) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:56.724:2968) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:56.914:2969) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:57.189:2970) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:57.504:2971) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:57.662:2972) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:57.767:2973) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:29:57.781:2974) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:57.979:2975) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:58.077:2976) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:29:58.768:2977) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 11:30:02.031:2978) : pid=505602 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:30:02.037:2979) : pid=505602 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 11:30:02.037:2980) : pid=505602 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=263 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:30:02.037:2980) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 11:30:02.037:2980) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=505602 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=263 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:02.074:2981) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:30:02.092:2982) : pid=505606 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:30:02.092:2983) : pid=505606 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 11:30:02.092:2984) : pid=505606 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=264 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:30:02.092:2984) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:30:02.092:2984) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=505606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=264 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 11:30:02.097:2985) : pid=505606 uid=root auid=root ses=264 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 11:30:02.126:2986) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:30:02.126:2986) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc5a41b8d0 a2=0x78 a3=0x7ffc5a41b8d0 items=0 ppid=1 pid=505606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=264 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:30:02.126:2986) : prog-id=297 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:30:02.126:2987) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:30:02.126:2987) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc5a41b990 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=505606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=264 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:30:02.126:2987) : prog-id=297 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:30:02.126:2988) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:30:02.126:2988) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc5a41b9a0 a2=0x78 a3=0x7ffc5a41b9a0 items=0 ppid=1 pid=505606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=264 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:30:02.126:2988) : prog-id=298 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:30:02.126:2989) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:30:02.126:2989) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc5a41b9a0 a2=0x78 a3=0x7ffc5a41b9a0 items=0 ppid=1 pid=505606 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=264 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:30:02.126:2989) : prog-id=298 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:02.311:2990) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 11:30:02.326:2991) : pid=505602 uid=root auid=root ses=263 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:30:02.330:2992) : pid=505622 uid=root auid=root ses=263 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 11:30:02.336:2993) : pid=505602 uid=root auid=root ses=263 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:03.639:2994) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:03.649:2995) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-logstash comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:03.663:2996) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-dashboards comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:03.668:2997) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:03.851:2998) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-esper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:04.371:2999) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-controller comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 11:30:12.367:3000) : pid=505614 uid=root auid=root ses=264 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:12.368:3001) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:12.391:3002) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:16.319:3003) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:16.320:3004) : prog-id=299 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:16.330:3005) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.172:3006) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.227:3007) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.248:3008) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.292:3009) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.328:3010) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:34.335:3011) : prog-id=291 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.383:3012) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.638:3013) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:34.663:3014) : prog-id=292 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.736:3015) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:34.825:3016) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.117:3017) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.177:3018) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.231:3019) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.232:3020) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.282:3021) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.371:3022) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.372:3023) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.373:3024) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.415:3025) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.439:3026) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.511:3027) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.534:3028) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.559:3029) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.560:3030) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.594:3031) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-dashboards comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.631:3032) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:35.637:3033) : prog-id=299 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.650:3034) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.651:3035) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.698:3036) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.767:3037) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.771:3038) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.786:3039) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.806:3040) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-esper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.829:3041) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.846:3042) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.860:3043) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.874:3044) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.899:3045) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:35.899:3046) : prog-id=294 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.944:3047) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:35.952:3048) : prog-id=295 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:35.984:3049) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.004:3050) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.074:3051) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.106:3052) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.149:3053) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.174:3054) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.203:3055) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.312:3056) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.374:3057) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.401:3058) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.503:3059) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.533:3060) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.552:3061) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-controller comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.588:3062) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.601:3063) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.832:3064) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.861:3065) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.871:3066) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.883:3067) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.895:3068) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.908:3069) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.972:3070) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:36.989:3071) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:37.037:3072) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:37.043:3073) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:37.055:3074) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:37.059:3075) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:37.277:3076) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:37.570:3077) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:37.781:3078) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:38.763:3079) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:38.941:3080) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:38.945:3081) : prog-id=296 op=UNLOAD 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:38.945:3082) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:39.459:3083) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:40.170:3084) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:40.255:3085) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:40.410:3086) : prog-id=300 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:40.425:3087) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:40.443:3088) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:40.520:3089) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:40.523:3090) : prog-id=301 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:40.533:3091) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:40.840:3092) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-dashboards comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:41.109:3093) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:41.158:3094) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:41.392:3095) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:41.627:3096) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:41.738:3097) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:41.752:3098) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.109:3099) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.173:3100) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.193:3101) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:42.233:3102) : prog-id=302 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.290:3103) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.290:3104) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.290:3105) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:42.414:3106) : prog-id=303 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.457:3107) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.457:3108) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:42.457:3109) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.470:3110) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:30:42.511:3111) : prog-id=304 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:42.547:3112) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:43.666:3113) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:43.696:3114) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:43.728:3115) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:43.965:3116) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.051:3117) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.067:3118) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.084:3119) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.169:3120) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.413:3121) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.459:3122) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-esper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.496:3123) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.679:3124) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:44.982:3125) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:45.263:3126) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:45.401:3127) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:46.105:3128) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:46.219:3129) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:46.378:3130) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:47.302:3131) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:47.449:3132) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:47.449:3133) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:47.489:3134) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:47.602:3135) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:47.833:3136) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-controller comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:47.974:3137) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:48.050:3138) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:48.097:3139) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:48.161:3140) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:48.198:3141) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:48.927:3142) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:49.206:3143) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:49.556:3144) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:49.678:3145) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:49.700:3146) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:49.904:3147) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:50.370:3148) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:50.456:3149) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:50.456:3150) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:50.723:3151) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:51.181:3152) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:51.349:3153) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:51.406:3154) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:51.729:3155) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:52.191:3156) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:52.266:3157) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:52.407:3158) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:52.467:3159) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:52.551:3160) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:52.717:3161) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:30:52.980:3162) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:53.087:3163) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:53.689:3164) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:30:55.532:3165) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:00.755:3166) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:00.805:3167) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:04.201:3168) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:15.839:3169) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 11:31:15.839:3170) : prog-id=305 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:15.848:3171) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:31:23.573:3172) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-logstash comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:23.580:3173) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-logstash comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:31:34.469:3174) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:31:34.748:3175) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:31:34.834:3176) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:35.227:3177) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:35.866:3178) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 11:31:36.879:3179) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:32:04.361:3180) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_START msg=audit(13.03.2026 11:32:04.910:3181) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 11:40:01.291:3182) : pid=514500 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:40:01.292:3183) : pid=514500 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 11:40:01.292:3184) : pid=514500 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=265 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:40:01.292:3184) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 11:40:01.292:3184) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=514500 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=265 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 11:40:01.320:3185) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:40:01.324:3186) : pid=514503 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:40:01.324:3187) : pid=514503 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 11:40:01.324:3188) : pid=514503 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=266 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:40:01.324:3188) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:40:01.324:3188) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=514503 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=266 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 11:40:01.325:3189) : pid=514503 uid=root auid=root ses=266 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 11:40:01.330:3190) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:40:01.330:3190) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd0fd9c9f0 a2=0x78 a3=0x7ffd0fd9c9f0 items=0 ppid=1 pid=514503 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=266 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:40:01.330:3190) : prog-id=306 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:40:01.330:3191) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:40:01.330:3191) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd0fd9cab0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=514503 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=266 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:40:01.330:3191) : prog-id=306 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:40:01.330:3192) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:40:01.330:3192) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd0fd9cac0 a2=0x78 a3=0x7ffd0fd9cac0 items=0 ppid=1 pid=514503 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=266 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:40:01.330:3192) : prog-id=307 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:40:01.330:3193) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:40:01.330:3193) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd0fd9cac0 a2=0x78 a3=0x7ffd0fd9cac0 items=0 ppid=1 pid=514503 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=266 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:40:01.330:3193) : prog-id=307 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:40:01.387:3194) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 11:40:01.394:3195) : pid=514500 uid=root auid=root ses=265 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:40:01.394:3196) : pid=514512 uid=root auid=root ses=265 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 11:40:01.396:3197) : pid=514500 uid=root auid=root ses=265 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 11:40:11.608:3198) : pid=514505 uid=root auid=root ses=266 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:40:11.608:3199) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:40:11.621:3200) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 11:50:01.755:3201) : pid=522291 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:50:01.757:3202) : pid=522291 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 11:50:01.757:3203) : pid=522291 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=267 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:50:01.757:3203) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 11:50:01.757:3203) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=522291 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=267 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 11:50:01.779:3204) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 11:50:01.785:3205) : pid=522294 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:50:01.785:3206) : pid=522294 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 11:50:01.785:3207) : pid=522294 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=268 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 11:50:01.785:3207) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:50:01.785:3207) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=522294 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=268 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 11:50:01.787:3208) : pid=522294 uid=root auid=root ses=268 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 11:50:01.806:3209) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:50:01.806:3209) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe4dca00e0 a2=0x78 a3=0x7ffe4dca00e0 items=0 ppid=1 pid=522294 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=268 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:50:01.806:3209) : prog-id=308 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:50:01.806:3210) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:50:01.806:3210) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe4dca01a0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=522294 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=268 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:50:01.806:3210) : prog-id=308 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:50:01.806:3211) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:50:01.806:3211) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe4dca01b0 a2=0x78 a3=0x7ffe4dca01b0 items=0 ppid=1 pid=522294 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=268 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:50:01.806:3211) : prog-id=309 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 11:50:01.806:3212) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 11:50:01.806:3212) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe4dca01b0 a2=0x78 a3=0x7ffe4dca01b0 items=0 ppid=1 pid=522294 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=268 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 11:50:01.806:3212) : prog-id=309 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 11:50:01.865:3213) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 11:50:01.874:3214) : pid=522291 uid=root auid=root ses=267 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 11:50:01.874:3215) : pid=522303 uid=root auid=root ses=267 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 11:50:01.876:3216) : pid=522291 uid=root auid=root ses=267 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 11:50:12.106:3217) : pid=522296 uid=root auid=root ses=268 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:50:12.107:3218) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 11:50:12.135:3219) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 12:00:01.209:3220) : pid=531066 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:00:01.212:3221) : pid=531066 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 12:00:01.212:3222) : pid=531066 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=269 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:00:01.212:3222) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 12:00:01.212:3222) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=531066 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=269 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 12:00:01.257:3223) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:00:01.277:3224) : pid=531070 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:00:01.277:3225) : pid=531070 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 12:00:01.277:3226) : pid=531070 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=270 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:00:01.277:3226) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:00:01.277:3226) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=531070 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=270 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 12:00:01.279:3227) : pid=531070 uid=root auid=root ses=270 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:00:01.299:3228) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:00:01.299:3228) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc630347d0 a2=0x78 a3=0x7ffc630347d0 items=0 ppid=1 pid=531070 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=270 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:00:01.299:3228) : prog-id=310 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:00:01.299:3229) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:00:01.299:3229) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc63034890 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=531070 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=270 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:00:01.299:3229) : prog-id=310 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:00:01.299:3230) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:00:01.299:3230) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc630348a0 a2=0x78 a3=0x7ffc630348a0 items=0 ppid=1 pid=531070 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=270 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:00:01.299:3230) : prog-id=311 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:00:01.299:3231) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:00:01.299:3231) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc630348a0 a2=0x78 a3=0x7ffc630348a0 items=0 ppid=1 pid=531070 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=270 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:00:01.299:3231) : prog-id=311 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 12:00:01.379:3232) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 12:00:01.403:3233) : pid=531066 uid=root auid=root ses=269 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:00:01.407:3234) : pid=531079 uid=root auid=root ses=269 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 12:00:01.416:3235) : pid=531066 uid=root auid=root ses=269 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 12:00:11.602:3236) : pid=531072 uid=root auid=root ses=270 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:00:11.602:3237) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:00:11.622:3238) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 12:01:01.057:3239) : pid=531921 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:01:01.060:3240) : pid=531921 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 12:01:01.061:3241) : pid=531921 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=271 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:01:01.061:3241) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 12:01:01.061:3241) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=531921 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=271 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 12:01:01.094:3242) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:01:01.107:3243) : pid=531928 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:01:01.107:3244) : pid=531928 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 12:01:01.107:3245) : pid=531928 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=272 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:01:01.107:3245) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:01:01.107:3245) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=531928 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=272 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 12:01:01.107:3246) : pid=531928 uid=root auid=root ses=272 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:01:01.113:3247) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:01:01.113:3247) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff8799ae40 a2=0x78 a3=0x7fff8799ae40 items=0 ppid=1 pid=531928 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=272 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:01:01.113:3247) : prog-id=312 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:01:01.113:3248) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:01:01.113:3248) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff8799af00 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=531928 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=272 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:01:01.113:3248) : prog-id=312 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:01:01.113:3249) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:01:01.113:3249) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff8799af10 a2=0x78 a3=0x7fff8799af10 items=0 ppid=1 pid=531928 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=272 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:01:01.113:3249) : prog-id=313 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:01:01.113:3250) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:01:01.113:3250) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff8799af10 a2=0x78 a3=0x7fff8799af10 items=0 ppid=1 pid=531928 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=272 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:01:01.113:3250) : prog-id=313 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 12:01:01.175:3251) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 12:01:01.178:3252) : pid=531921 uid=root auid=root ses=271 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:01:01.179:3253) : pid=531938 uid=root auid=root ses=271 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 12:01:01.183:3254) : pid=531921 uid=root auid=root ses=271 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 12:01:11.353:3255) : pid=531931 uid=root auid=root ses=272 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:01:11.353:3256) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:01:11.368:3257) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 12:10:01.465:3258) : pid=539974 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:10:01.466:3259) : pid=539974 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 12:10:01.467:3260) : pid=539974 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=273 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:10:01.467:3260) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 12:10:01.467:3260) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=539974 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=273 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 12:10:01.505:3261) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:10:01.524:3262) : pid=539977 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:10:01.524:3263) : pid=539977 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 12:10:01.524:3264) : pid=539977 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=274 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:10:01.524:3264) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:10:01.524:3264) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=539977 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=274 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 12:10:01.528:3265) : pid=539977 uid=root auid=root ses=274 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:10:01.551:3266) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:10:01.551:3266) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffaf478530 a2=0x78 a3=0x7fffaf478530 items=0 ppid=1 pid=539977 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=274 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:10:01.551:3266) : prog-id=314 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:10:01.551:3267) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:10:01.551:3267) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffaf4785f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=539977 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=274 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:10:01.551:3267) : prog-id=314 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:10:01.551:3268) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:10:01.551:3268) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffaf478600 a2=0x78 a3=0x7fffaf478600 items=0 ppid=1 pid=539977 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=274 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:10:01.551:3268) : prog-id=315 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:10:01.551:3269) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:10:01.551:3269) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffaf478600 a2=0x78 a3=0x7fffaf478600 items=0 ppid=1 pid=539977 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=274 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:10:01.551:3269) : prog-id=315 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 12:10:01.621:3270) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 12:10:01.634:3271) : pid=539974 uid=root auid=root ses=273 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:10:01.636:3272) : pid=539987 uid=root auid=root ses=273 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 12:10:01.641:3273) : pid=539974 uid=root auid=root ses=273 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 12:10:11.855:3274) : pid=539979 uid=root auid=root ses=274 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:10:11.855:3275) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:10:11.866:3276) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 12:20:01.880:3277) : pid=548444 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:20:01.880:3278) : pid=548444 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 12:20:01.880:3279) : pid=548444 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=275 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:20:01.880:3279) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 12:20:01.880:3279) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=548444 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=275 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 12:20:01.896:3280) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:20:01.900:3281) : pid=548447 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:20:01.900:3282) : pid=548447 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 12:20:01.900:3283) : pid=548447 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=276 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:20:01.900:3283) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:20:01.900:3283) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=548447 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=276 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 12:20:01.901:3284) : pid=548447 uid=root auid=root ses=276 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:20:01.908:3285) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:20:01.908:3285) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe6b01a850 a2=0x78 a3=0x7ffe6b01a850 items=0 ppid=1 pid=548447 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=276 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:20:01.908:3285) : prog-id=316 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:20:01.908:3286) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:20:01.908:3286) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe6b01a910 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=548447 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=276 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:20:01.908:3286) : prog-id=316 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:20:01.908:3287) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:20:01.908:3287) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe6b01a920 a2=0x78 a3=0x7ffe6b01a920 items=0 ppid=1 pid=548447 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=276 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:20:01.908:3287) : prog-id=317 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:20:01.908:3288) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:20:01.908:3288) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe6b01a920 a2=0x78 a3=0x7ffe6b01a920 items=0 ppid=1 pid=548447 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=276 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:20:01.908:3288) : prog-id=317 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 12:20:01.979:3289) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 12:20:01.983:3290) : pid=548444 uid=root auid=root ses=275 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:20:01.983:3291) : pid=548456 uid=root auid=root ses=275 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 12:20:01.986:3292) : pid=548444 uid=root auid=root ses=275 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 12:20:12.102:3293) : pid=548449 uid=root auid=root ses=276 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:20:12.103:3294) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:20:12.116:3295) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 12:30:01.350:3296) : pid=557790 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:30:01.352:3297) : pid=557790 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 12:30:01.352:3298) : pid=557790 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=277 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:30:01.352:3298) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 12:30:01.352:3298) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=557790 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=277 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 12:30:01.382:3299) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:30:01.388:3300) : pid=557793 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:30:01.388:3301) : pid=557793 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 12:30:01.389:3302) : pid=557793 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=278 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:30:01.389:3302) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:30:01.389:3302) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=557793 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=278 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 12:30:01.390:3303) : pid=557793 uid=root auid=root ses=278 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:30:01.400:3304) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:30:01.400:3304) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffca2aafab0 a2=0x78 a3=0x7ffca2aafab0 items=0 ppid=1 pid=557793 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=278 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:30:01.400:3304) : prog-id=318 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:30:01.400:3305) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:30:01.400:3305) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffca2aafb70 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=557793 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=278 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:30:01.400:3305) : prog-id=318 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:30:01.400:3306) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:30:01.400:3306) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffca2aafb80 a2=0x78 a3=0x7ffca2aafb80 items=0 ppid=1 pid=557793 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=278 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:30:01.400:3306) : prog-id=319 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:30:01.400:3307) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:30:01.400:3307) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffca2aafb80 a2=0x78 a3=0x7ffca2aafb80 items=0 ppid=1 pid=557793 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=278 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:30:01.400:3307) : prog-id=319 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 12:30:01.463:3308) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 12:30:01.470:3309) : pid=557790 uid=root auid=root ses=277 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:30:01.471:3310) : pid=557802 uid=root auid=root ses=277 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 12:30:01.474:3311) : pid=557790 uid=root auid=root ses=277 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 12:30:11.614:3312) : pid=557795 uid=root auid=root ses=278 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:30:11.614:3313) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:30:11.626:3314) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:36:21.071:3315) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 12:36:21.866:3316) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:36:40.683:3317) : proctitle=tcpdump -i lo port 514 -s0 -v 
type=SYSCALL msg=audit(13.03.2026 12:36:40.683:3317) : arch=x86_64 syscall=setsockopt success=yes exit=0 a0=0x4 a1=SOL_PACKET a2=PACKET_ADD_MEMBERSHIP a3=0x7fff7ebe36e0 items=0 ppid=471452 pid=563315 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 ses=251 comm=tcpdump exe=/usr/bin/tcpdump.4.99.4 key=(null) 
type=ANOM_PROMISCUOUS msg=audit(13.03.2026 12:36:40.683:3317) : dev=lo prom=yes old_prom=no auid=datapk uid=root gid=root ses=251 
----
type=PROCTITLE msg=audit(13.03.2026 12:37:45.558:3318) : proctitle=tcpdump -i lo port 514 -s0 -v 
type=SYSCALL msg=audit(13.03.2026 12:37:45.558:3318) : arch=x86_64 syscall=close success=yes exit=0 a0=0x4 a1=0x2 a2=0xb a3=0x7f898d745caa items=0 ppid=471452 pid=563315 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 ses=251 comm=tcpdump exe=/usr/bin/tcpdump.4.99.4 key=(null) 
type=ANOM_PROMISCUOUS msg=audit(13.03.2026 12:37:45.558:3318) : dev=lo prom=no old_prom=yes auid=datapk uid=root gid=root ses=251 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:39:01.634:3319) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 12:39:02.367:3320) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:39:06.575:3321) : proctitle=tcpdump -i lo port 514 -s0 -v 
type=SYSCALL msg=audit(13.03.2026 12:39:06.575:3321) : arch=x86_64 syscall=setsockopt success=yes exit=0 a0=0x4 a1=SOL_PACKET a2=PACKET_ADD_MEMBERSHIP a3=0x7fffd35744c0 items=0 ppid=471452 pid=565657 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 ses=251 comm=tcpdump exe=/usr/bin/tcpdump.4.99.4 key=(null) 
type=ANOM_PROMISCUOUS msg=audit(13.03.2026 12:39:06.575:3321) : dev=lo prom=yes old_prom=no auid=datapk uid=root gid=root ses=251 
----
type=PROCTITLE msg=audit(13.03.2026 12:39:15.457:3322) : proctitle=tcpdump -i lo port 514 -s0 -v 
type=SYSCALL msg=audit(13.03.2026 12:39:15.457:3322) : arch=x86_64 syscall=close success=yes exit=0 a0=0x4 a1=0x2 a2=0xb a3=0x7f0c391afcaa items=0 ppid=471452 pid=565657 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts1 ses=251 comm=tcpdump exe=/usr/bin/tcpdump.4.99.4 key=(null) 
type=ANOM_PROMISCUOUS msg=audit(13.03.2026 12:39:15.457:3322) : dev=lo prom=no old_prom=yes auid=datapk uid=root gid=root ses=251 
----
type=USER_AUTH msg=audit(13.03.2026 12:40:01.790:3323) : pid=566477 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:40:01.792:3324) : pid=566477 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 12:40:01.792:3325) : pid=566477 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=279 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:40:01.792:3325) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 12:40:01.792:3325) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=566477 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=279 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 12:40:01.824:3326) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:40:01.843:3327) : pid=566480 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:40:01.844:3328) : pid=566480 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 12:40:01.844:3329) : pid=566480 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=280 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:40:01.844:3329) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:40:01.844:3329) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=566480 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=280 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 12:40:01.848:3330) : pid=566480 uid=root auid=root ses=280 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:40:01.853:3331) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:40:01.853:3331) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9b03d600 a2=0x78 a3=0x7fff9b03d600 items=0 ppid=1 pid=566480 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=280 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:40:01.853:3331) : prog-id=320 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:40:01.853:3332) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:40:01.853:3332) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9b03d6c0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=566480 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=280 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:40:01.853:3332) : prog-id=320 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:40:01.853:3333) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:40:01.853:3333) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9b03d6d0 a2=0x78 a3=0x7fff9b03d6d0 items=0 ppid=1 pid=566480 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=280 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:40:01.853:3333) : prog-id=321 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:40:01.853:3334) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:40:01.853:3334) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9b03d6d0 a2=0x78 a3=0x7fff9b03d6d0 items=0 ppid=1 pid=566480 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=280 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:40:01.853:3334) : prog-id=321 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 12:40:01.909:3335) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 12:40:01.912:3336) : pid=566477 uid=root auid=root ses=279 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:40:01.913:3337) : pid=566489 uid=root auid=root ses=279 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 12:40:01.918:3338) : pid=566477 uid=root auid=root ses=279 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 12:40:12.110:3339) : pid=566482 uid=root auid=root ses=280 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:40:12.110:3340) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:40:12.121:3341) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 12:50:01.210:3342) : pid=575452 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:50:01.211:3343) : pid=575452 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 12:50:01.212:3344) : pid=575452 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=281 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:50:01.212:3344) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 12:50:01.212:3344) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=575452 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=281 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 12:50:01.244:3345) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 12:50:01.252:3346) : pid=575455 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:50:01.252:3347) : pid=575455 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 12:50:01.252:3348) : pid=575455 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=282 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 12:50:01.252:3348) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:50:01.252:3348) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=575455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=282 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 12:50:01.255:3349) : pid=575455 uid=root auid=root ses=282 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 12:50:01.264:3350) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:50:01.264:3350) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc4bcfd010 a2=0x78 a3=0x7ffc4bcfd010 items=0 ppid=1 pid=575455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=282 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:50:01.264:3350) : prog-id=322 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:50:01.264:3351) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:50:01.264:3351) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc4bcfd0d0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=575455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=282 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:50:01.264:3351) : prog-id=322 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:50:01.264:3352) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:50:01.264:3352) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc4bcfd0e0 a2=0x78 a3=0x7ffc4bcfd0e0 items=0 ppid=1 pid=575455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=282 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:50:01.264:3352) : prog-id=323 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 12:50:01.264:3353) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 12:50:01.264:3353) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc4bcfd0e0 a2=0x78 a3=0x7ffc4bcfd0e0 items=0 ppid=1 pid=575455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=282 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 12:50:01.264:3353) : prog-id=323 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 12:50:01.331:3354) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 12:50:01.337:3355) : pid=575452 uid=root auid=root ses=281 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 12:50:01.338:3356) : pid=575470 uid=root auid=root ses=281 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 12:50:01.341:3357) : pid=575452 uid=root auid=root ses=281 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 12:50:11.352:3358) : pid=575458 uid=root auid=root ses=282 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:50:11.353:3359) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 12:50:11.366:3360) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 13:00:01.653:3361) : pid=584362 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:00:01.654:3362) : pid=584362 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 13:00:01.655:3363) : pid=584362 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=283 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:00:01.655:3363) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 13:00:01.655:3363) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=584362 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=283 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 13:00:01.685:3364) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:00:01.691:3365) : pid=584365 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:00:01.691:3366) : pid=584365 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 13:00:01.692:3367) : pid=584365 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=284 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:00:01.692:3367) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:00:01.692:3367) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=584365 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=284 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 13:00:01.694:3368) : pid=584365 uid=root auid=root ses=284 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 13:00:01.706:3369) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:00:01.706:3369) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd7bac8db0 a2=0x78 a3=0x7ffd7bac8db0 items=0 ppid=1 pid=584365 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=284 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:00:01.706:3369) : prog-id=324 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:00:01.706:3370) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:00:01.706:3370) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd7bac8e70 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=584365 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=284 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:00:01.706:3370) : prog-id=324 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:00:01.706:3371) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:00:01.706:3371) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd7bac8e80 a2=0x78 a3=0x7ffd7bac8e80 items=0 ppid=1 pid=584365 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=284 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:00:01.706:3371) : prog-id=325 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:00:01.706:3372) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:00:01.706:3372) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd7bac8e80 a2=0x78 a3=0x7ffd7bac8e80 items=0 ppid=1 pid=584365 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=284 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:00:01.706:3372) : prog-id=325 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 13:00:01.775:3373) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 13:00:01.784:3374) : pid=584362 uid=root auid=root ses=283 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:00:01.785:3375) : pid=584374 uid=root auid=root ses=283 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 13:00:01.789:3376) : pid=584362 uid=root auid=root ses=283 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 13:00:11.853:3377) : pid=584367 uid=root auid=root ses=284 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:00:11.853:3378) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:00:11.869:3379) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 13:01:01.554:3380) : pid=585260 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:01:01.556:3381) : pid=585260 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 13:01:01.556:3382) : pid=585260 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=285 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:01:01.556:3382) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 13:01:01.556:3382) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=585260 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=285 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 13:01:01.581:3383) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:01:01.598:3384) : pid=585263 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:01:01.598:3385) : pid=585263 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 13:01:01.598:3386) : pid=585263 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=286 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:01:01.598:3386) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:01:01.598:3386) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=585263 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=286 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 13:01:01.600:3387) : pid=585263 uid=root auid=root ses=286 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 13:01:01.604:3388) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:01:01.604:3388) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd54fd3fd0 a2=0x78 a3=0x7ffd54fd3fd0 items=0 ppid=1 pid=585263 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=286 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:01:01.604:3388) : prog-id=326 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:01:01.604:3389) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:01:01.604:3389) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd54fd4090 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=585263 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=286 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:01:01.604:3389) : prog-id=326 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:01:01.604:3390) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:01:01.604:3390) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd54fd40a0 a2=0x78 a3=0x7ffd54fd40a0 items=0 ppid=1 pid=585263 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=286 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:01:01.604:3390) : prog-id=327 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:01:01.604:3391) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:01:01.604:3391) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd54fd40a0 a2=0x78 a3=0x7ffd54fd40a0 items=0 ppid=1 pid=585263 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=286 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:01:01.604:3391) : prog-id=327 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 13:01:01.662:3392) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 13:01:01.667:3393) : pid=585260 uid=root auid=root ses=285 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:01:01.668:3394) : pid=585273 uid=root auid=root ses=285 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 13:01:01.672:3395) : pid=585260 uid=root auid=root ses=285 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 13:01:11.854:3396) : pid=585266 uid=root auid=root ses=286 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:01:11.854:3397) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:01:11.871:3398) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 13:10:01.971:3399) : pid=593141 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:10:01.973:3400) : pid=593141 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 13:10:01.973:3401) : pid=593141 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=287 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:10:01.973:3401) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 13:10:01.973:3401) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=593141 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=287 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 13:10:01.994:3402) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:10:01.999:3403) : pid=593144 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:10:01.999:3404) : pid=593144 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 13:10:01.999:3405) : pid=593144 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=288 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:10:01.999:3405) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:10:01.999:3405) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=593144 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=288 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 13:10:02.001:3406) : pid=593144 uid=root auid=root ses=288 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 13:10:02.014:3407) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:10:02.014:3407) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef659f4a0 a2=0x78 a3=0x7ffef659f4a0 items=0 ppid=1 pid=593144 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=288 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:10:02.014:3407) : prog-id=328 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:10:02.014:3408) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:10:02.014:3408) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef659f560 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=593144 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=288 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:10:02.014:3408) : prog-id=328 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:10:02.014:3409) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:10:02.014:3409) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffef659f570 a2=0x78 a3=0x7ffef659f570 items=0 ppid=1 pid=593144 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=288 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:10:02.014:3409) : prog-id=329 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:10:02.014:3410) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:10:02.014:3410) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffef659f570 a2=0x78 a3=0x7ffef659f570 items=0 ppid=1 pid=593144 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=288 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:10:02.014:3410) : prog-id=329 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 13:10:02.073:3411) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 13:10:02.080:3412) : pid=593141 uid=root auid=root ses=287 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:10:02.081:3413) : pid=593153 uid=root auid=root ses=287 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 13:10:02.083:3414) : pid=593141 uid=root auid=root ses=287 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 13:10:12.103:3415) : pid=593146 uid=root auid=root ses=288 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:10:12.104:3416) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:10:12.120:3417) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 13:20:01.442:3418) : pid=602042 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:20:01.442:3419) : pid=602042 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 13:20:01.442:3420) : pid=602042 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=289 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:20:01.442:3420) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 13:20:01.442:3420) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=602042 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=289 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 13:20:01.464:3421) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:20:01.470:3422) : pid=602045 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:20:01.470:3423) : pid=602045 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 13:20:01.470:3424) : pid=602045 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=290 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:20:01.470:3424) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:20:01.470:3424) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=602045 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=290 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 13:20:01.472:3425) : pid=602045 uid=root auid=root ses=290 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 13:20:01.476:3426) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:20:01.476:3426) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd05a8d4a0 a2=0x78 a3=0x7ffd05a8d4a0 items=0 ppid=1 pid=602045 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=290 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:20:01.476:3426) : prog-id=330 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:20:01.476:3427) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:20:01.476:3427) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd05a8d560 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=602045 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=290 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:20:01.476:3427) : prog-id=330 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:20:01.476:3428) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:20:01.476:3428) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd05a8d570 a2=0x78 a3=0x7ffd05a8d570 items=0 ppid=1 pid=602045 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=290 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:20:01.476:3428) : prog-id=331 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:20:01.478:3429) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:20:01.478:3429) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd05a8d570 a2=0x78 a3=0x7ffd05a8d570 items=0 ppid=1 pid=602045 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=290 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:20:01.478:3429) : prog-id=331 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 13:20:01.544:3430) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 13:20:01.550:3431) : pid=602042 uid=root auid=root ses=289 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:20:01.550:3432) : pid=602054 uid=root auid=root ses=289 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 13:20:01.553:3433) : pid=602042 uid=root auid=root ses=289 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 13:20:11.602:3434) : pid=602047 uid=root auid=root ses=290 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:20:11.603:3435) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:20:11.618:3436) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 13:30:01.924:3437) : pid=611028 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:30:01.926:3438) : pid=611028 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 13:30:01.926:3439) : pid=611028 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=291 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:30:01.926:3439) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 13:30:01.926:3439) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=611028 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=291 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 13:30:01.974:3440) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:30:01.990:3441) : pid=611031 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:30:01.990:3442) : pid=611031 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 13:30:01.990:3443) : pid=611031 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=292 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:30:01.990:3443) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:30:01.990:3443) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=611031 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=292 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 13:30:01.991:3444) : pid=611031 uid=root auid=root ses=292 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 13:30:02.007:3445) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:30:02.007:3445) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffece89a7f0 a2=0x78 a3=0x7ffece89a7f0 items=0 ppid=1 pid=611031 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=292 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:30:02.007:3445) : prog-id=332 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:30:02.007:3446) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:30:02.007:3446) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffece89a8b0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=611031 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=292 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:30:02.007:3446) : prog-id=332 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:30:02.007:3447) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:30:02.007:3447) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffece89a8c0 a2=0x78 a3=0x7ffece89a8c0 items=0 ppid=1 pid=611031 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=292 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:30:02.007:3447) : prog-id=333 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:30:02.007:3448) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:30:02.007:3448) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffece89a8c0 a2=0x78 a3=0x7ffece89a8c0 items=0 ppid=1 pid=611031 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=292 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:30:02.007:3448) : prog-id=333 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 13:30:02.078:3449) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 13:30:02.080:3450) : pid=611028 uid=root auid=root ses=291 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:30:02.081:3451) : pid=611041 uid=root auid=root ses=291 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 13:30:02.083:3452) : pid=611028 uid=root auid=root ses=291 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 13:30:12.107:3453) : pid=611034 uid=root auid=root ses=292 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:30:12.108:3454) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:30:12.125:3455) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 13:40:01.344:3456) : pid=619627 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:40:01.346:3457) : pid=619627 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 13:40:01.347:3458) : pid=619627 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=293 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:40:01.347:3458) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 13:40:01.347:3458) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=619627 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=293 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 13:40:01.369:3459) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:40:01.374:3460) : pid=619630 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:40:01.374:3461) : pid=619630 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 13:40:01.375:3462) : pid=619630 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=294 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:40:01.375:3462) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:40:01.375:3462) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=619630 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=294 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 13:40:01.378:3463) : pid=619630 uid=root auid=root ses=294 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 13:40:01.383:3464) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:40:01.383:3464) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff76f0a5f0 a2=0x78 a3=0x7fff76f0a5f0 items=0 ppid=1 pid=619630 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=294 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:40:01.383:3464) : prog-id=334 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:40:01.383:3465) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:40:01.383:3465) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff76f0a6b0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=619630 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=294 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:40:01.383:3465) : prog-id=334 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:40:01.383:3466) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:40:01.383:3466) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff76f0a6c0 a2=0x78 a3=0x7fff76f0a6c0 items=0 ppid=1 pid=619630 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=294 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:40:01.383:3466) : prog-id=335 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:40:01.383:3467) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:40:01.383:3467) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff76f0a6c0 a2=0x78 a3=0x7fff76f0a6c0 items=0 ppid=1 pid=619630 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=294 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:40:01.383:3467) : prog-id=335 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 13:40:01.440:3468) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 13:40:01.451:3469) : pid=619627 uid=root auid=root ses=293 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:40:01.452:3470) : pid=619639 uid=root auid=root ses=293 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 13:40:01.454:3471) : pid=619627 uid=root auid=root ses=293 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 13:40:11.600:3472) : pid=619632 uid=root auid=root ses=294 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:40:11.600:3473) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:40:11.617:3474) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 13:50:01.801:3475) : pid=628743 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:50:01.802:3476) : pid=628743 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 13:50:01.802:3477) : pid=628743 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=295 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:50:01.802:3477) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 13:50:01.802:3477) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=628743 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=295 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 13:50:01.828:3478) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 13:50:01.834:3479) : pid=628746 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:50:01.834:3480) : pid=628746 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 13:50:01.835:3481) : pid=628746 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=296 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 13:50:01.835:3481) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:50:01.835:3481) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=628746 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=296 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 13:50:01.836:3482) : pid=628746 uid=root auid=root ses=296 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 13:50:01.852:3483) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:50:01.852:3483) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff4a6509f0 a2=0x78 a3=0x7fff4a6509f0 items=0 ppid=1 pid=628746 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=296 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:50:01.852:3483) : prog-id=336 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:50:01.852:3484) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:50:01.852:3484) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff4a650ab0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=628746 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=296 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:50:01.852:3484) : prog-id=336 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:50:01.852:3485) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:50:01.852:3485) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff4a650ac0 a2=0x78 a3=0x7fff4a650ac0 items=0 ppid=1 pid=628746 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=296 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:50:01.852:3485) : prog-id=337 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 13:50:01.852:3486) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 13:50:01.852:3486) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff4a650ac0 a2=0x78 a3=0x7fff4a650ac0 items=0 ppid=1 pid=628746 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=296 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 13:50:01.852:3486) : prog-id=337 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 13:50:01.917:3487) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 13:50:01.921:3488) : pid=628743 uid=root auid=root ses=295 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 13:50:01.921:3489) : pid=628755 uid=root auid=root ses=295 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 13:50:01.923:3490) : pid=628743 uid=root auid=root ses=295 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 13:50:12.102:3491) : pid=628748 uid=root auid=root ses=296 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:50:12.102:3492) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 13:50:12.115:3493) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 14:00:01.270:3494) : pid=637832 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:00:01.271:3495) : pid=637832 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 14:00:01.272:3496) : pid=637832 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=297 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:00:01.272:3496) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 14:00:01.272:3496) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=637832 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=297 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 14:00:01.291:3497) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:00:01.295:3498) : pid=637835 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:00:01.296:3499) : pid=637835 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 14:00:01.296:3500) : pid=637835 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=298 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:00:01.296:3500) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:00:01.296:3500) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=637835 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=298 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 14:00:01.297:3501) : pid=637835 uid=root auid=root ses=298 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 14:00:01.301:3502) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:00:01.301:3502) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe48018ee0 a2=0x78 a3=0x7ffe48018ee0 items=0 ppid=1 pid=637835 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=298 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:00:01.301:3502) : prog-id=338 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:00:01.301:3503) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:00:01.301:3503) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe48018fa0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=637835 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=298 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:00:01.301:3503) : prog-id=338 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:00:01.301:3504) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:00:01.301:3504) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe48018fb0 a2=0x78 a3=0x7ffe48018fb0 items=0 ppid=1 pid=637835 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=298 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:00:01.301:3504) : prog-id=339 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:00:01.301:3505) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:00:01.301:3505) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe48018fb0 a2=0x78 a3=0x7ffe48018fb0 items=0 ppid=1 pid=637835 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=298 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:00:01.301:3505) : prog-id=339 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 14:00:01.364:3506) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 14:00:01.379:3507) : pid=637832 uid=root auid=root ses=297 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:00:01.380:3508) : pid=637845 uid=root auid=root ses=297 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 14:00:01.383:3509) : pid=637832 uid=root auid=root ses=297 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:00:11.604:3510) : pid=637837 uid=root auid=root ses=298 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:00:11.604:3511) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:00:11.616:3512) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 14:01:01.216:3513) : pid=638690 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:01:01.217:3514) : pid=638690 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 14:01:01.217:3515) : pid=638690 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=299 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:01:01.217:3515) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 14:01:01.217:3515) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=638690 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=299 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 14:01:01.245:3516) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:01:01.263:3517) : pid=638694 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:01:01.263:3518) : pid=638694 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 14:01:01.263:3519) : pid=638694 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=300 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:01:01.263:3519) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:01:01.263:3519) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=638694 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=300 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 14:01:01.264:3520) : pid=638694 uid=root auid=root ses=300 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 14:01:01.293:3521) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:01:01.293:3521) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdf0756680 a2=0x78 a3=0x7ffdf0756680 items=0 ppid=1 pid=638694 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=300 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:01:01.293:3521) : prog-id=340 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:01:01.293:3522) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:01:01.293:3522) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdf0756740 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=638694 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=300 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:01:01.293:3522) : prog-id=340 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:01:01.293:3523) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:01:01.293:3523) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdf0756750 a2=0x78 a3=0x7ffdf0756750 items=0 ppid=1 pid=638694 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=300 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:01:01.293:3523) : prog-id=341 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:01:01.293:3524) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:01:01.293:3524) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdf0756750 a2=0x78 a3=0x7ffdf0756750 items=0 ppid=1 pid=638694 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=300 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:01:01.293:3524) : prog-id=341 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 14:01:01.358:3525) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 14:01:01.362:3526) : pid=638690 uid=root auid=root ses=299 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:01:01.362:3527) : pid=638703 uid=root auid=root ses=299 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 14:01:01.365:3528) : pid=638690 uid=root auid=root ses=299 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:01:11.606:3529) : pid=638696 uid=root auid=root ses=300 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:01:11.606:3530) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:01:11.616:3531) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 14:10:01.598:3532) : pid=647027 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:10:01.599:3533) : pid=647027 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 14:10:01.599:3534) : pid=647027 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=301 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:10:01.599:3534) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 14:10:01.599:3534) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=647027 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=301 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 14:10:01.624:3535) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:10:01.634:3536) : pid=647030 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:10:01.634:3537) : pid=647030 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 14:10:01.634:3538) : pid=647030 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=302 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:10:01.634:3538) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:10:01.634:3538) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=647030 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=302 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 14:10:01.638:3539) : pid=647030 uid=root auid=root ses=302 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 14:10:01.660:3540) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:10:01.660:3540) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdd59737a0 a2=0x78 a3=0x7ffdd59737a0 items=0 ppid=1 pid=647030 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=302 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:10:01.660:3540) : prog-id=342 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:10:01.660:3541) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:10:01.660:3541) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdd5973860 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=647030 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=302 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:10:01.660:3541) : prog-id=342 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:10:01.660:3542) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:10:01.660:3542) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffdd5973870 a2=0x78 a3=0x7ffdd5973870 items=0 ppid=1 pid=647030 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=302 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:10:01.660:3542) : prog-id=343 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:10:01.660:3543) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:10:01.660:3543) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffdd5973870 a2=0x78 a3=0x7ffdd5973870 items=0 ppid=1 pid=647030 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=302 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:10:01.660:3543) : prog-id=343 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 14:10:01.726:3544) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 14:10:01.736:3545) : pid=647027 uid=root auid=root ses=301 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:10:01.736:3546) : pid=647039 uid=root auid=root ses=301 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 14:10:01.738:3547) : pid=647027 uid=root auid=root ses=301 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:10:11.852:3548) : pid=647032 uid=root auid=root ses=302 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:10:11.853:3549) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:10:11.868:3550) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 14:20:02.033:3551) : pid=655821 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:20:02.034:3552) : pid=655821 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 14:20:02.034:3553) : pid=655821 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=303 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:20:02.034:3553) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 14:20:02.034:3553) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=655821 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=303 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 14:20:02.062:3554) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:20:02.066:3555) : pid=655824 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:20:02.067:3556) : pid=655824 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 14:20:02.067:3557) : pid=655824 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=304 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:20:02.067:3557) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:20:02.067:3557) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=655824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=304 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 14:20:02.068:3558) : pid=655824 uid=root auid=root ses=304 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 14:20:02.073:3559) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:20:02.073:3559) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffb327a5d0 a2=0x78 a3=0x7fffb327a5d0 items=0 ppid=1 pid=655824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=304 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:20:02.073:3559) : prog-id=344 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:20:02.073:3560) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:20:02.073:3560) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffb327a690 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=655824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=304 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:20:02.073:3560) : prog-id=344 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:20:02.073:3561) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:20:02.073:3561) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffb327a6a0 a2=0x78 a3=0x7fffb327a6a0 items=0 ppid=1 pid=655824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=304 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:20:02.073:3561) : prog-id=345 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:20:02.073:3562) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:20:02.073:3562) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffb327a6a0 a2=0x78 a3=0x7fffb327a6a0 items=0 ppid=1 pid=655824 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=304 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:20:02.073:3562) : prog-id=345 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 14:20:02.121:3563) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 14:20:02.132:3564) : pid=655821 uid=root auid=root ses=303 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:20:02.132:3565) : pid=655833 uid=root auid=root ses=303 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 14:20:02.136:3566) : pid=655821 uid=root auid=root ses=303 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:20:12.355:3567) : pid=655826 uid=root auid=root ses=304 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:20:12.356:3568) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:20:12.370:3569) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 14:30:01.467:3570) : pid=664970 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:30:01.468:3571) : pid=664970 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 14:30:01.468:3572) : pid=664970 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=305 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:30:01.468:3572) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 14:30:01.468:3572) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=664970 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=305 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 14:30:01.487:3573) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:30:01.492:3574) : pid=664973 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:30:01.492:3575) : pid=664973 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 14:30:01.493:3576) : pid=664973 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=306 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:30:01.493:3576) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:30:01.493:3576) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=664973 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=306 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 14:30:01.495:3577) : pid=664973 uid=root auid=root ses=306 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 14:30:01.499:3578) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:30:01.499:3578) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffffef4aec0 a2=0x78 a3=0x7ffffef4aec0 items=0 ppid=1 pid=664973 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=306 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:30:01.499:3578) : prog-id=346 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:30:01.500:3579) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:30:01.500:3579) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffffef4af80 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=664973 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=306 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:30:01.500:3579) : prog-id=346 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:30:01.500:3580) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:30:01.500:3580) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffffef4af90 a2=0x78 a3=0x7ffffef4af90 items=0 ppid=1 pid=664973 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=306 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:30:01.500:3580) : prog-id=347 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:30:01.500:3581) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:30:01.500:3581) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffffef4af90 a2=0x78 a3=0x7ffffef4af90 items=0 ppid=1 pid=664973 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=306 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:30:01.500:3581) : prog-id=347 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 14:30:01.551:3582) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 14:30:01.558:3583) : pid=664970 uid=root auid=root ses=305 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:30:01.559:3584) : pid=664982 uid=root auid=root ses=305 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 14:30:01.560:3585) : pid=664970 uid=root auid=root ses=305 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:30:11.602:3586) : pid=664975 uid=root auid=root ses=306 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:30:11.602:3587) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:30:11.617:3588) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 14:38:04.516:3589) : pid=7437 uid=root auid=datapk ses=5 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:38:04.516:3590) : pid=7437 uid=root auid=datapk ses=5 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_END msg=audit(13.03.2026 14:38:04.974:3591) : pid=7450 uid=root auid=datapk ses=6 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:38:04.974:3592) : pid=7450 uid=root auid=datapk ses=6 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:38:07.519:3593) : pid=7874 uid=datapk auid=datapk ses=5 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_END msg=audit(13.03.2026 14:38:07.519:3594) : pid=7874 uid=datapk auid=datapk ses=5 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 14:40:01.944:3595) : pid=673378 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:40:01.945:3596) : pid=673378 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 14:40:01.945:3597) : pid=673378 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=307 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:40:01.945:3597) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 14:40:01.945:3597) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=673378 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=307 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 14:40:01.968:3598) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:40:01.973:3599) : pid=673381 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:40:01.973:3600) : pid=673381 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 14:40:01.974:3601) : pid=673381 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=308 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:40:01.974:3601) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:40:01.974:3601) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=673381 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=308 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 14:40:01.976:3602) : pid=673381 uid=root auid=root ses=308 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 14:40:01.994:3603) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:40:01.994:3603) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffae885780 a2=0x78 a3=0x7fffae885780 items=0 ppid=1 pid=673381 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=308 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:40:01.994:3603) : prog-id=348 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:40:01.994:3604) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:40:01.994:3604) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffae885840 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=673381 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=308 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:40:01.994:3604) : prog-id=348 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:40:01.994:3605) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:40:01.994:3605) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffae885850 a2=0x78 a3=0x7fffae885850 items=0 ppid=1 pid=673381 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=308 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:40:01.994:3605) : prog-id=349 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:40:01.994:3606) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:40:01.994:3606) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffae885850 a2=0x78 a3=0x7fffae885850 items=0 ppid=1 pid=673381 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=308 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:40:01.994:3606) : prog-id=349 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 14:40:02.055:3607) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 14:40:02.059:3608) : pid=673378 uid=root auid=root ses=307 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:40:02.061:3609) : pid=673390 uid=root auid=root ses=307 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 14:40:02.063:3610) : pid=673378 uid=root auid=root ses=307 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:40:12.105:3611) : pid=673383 uid=root auid=root ses=308 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:40:12.106:3612) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:40:12.117:3613) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 14:50:01.387:3614) : pid=679233 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:50:01.388:3615) : pid=679233 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 14:50:01.389:3616) : pid=679233 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=309 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:50:01.389:3616) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 14:50:01.389:3616) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=679233 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=309 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 14:50:01.418:3617) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 14:50:01.425:3618) : pid=679236 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:50:01.426:3619) : pid=679236 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 14:50:01.426:3620) : pid=679236 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=310 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 14:50:01.426:3620) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:50:01.426:3620) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=679236 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=310 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 14:50:01.431:3621) : pid=679236 uid=root auid=root ses=310 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 14:50:01.445:3622) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:50:01.445:3622) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd7a1e0f40 a2=0x78 a3=0x7ffd7a1e0f40 items=0 ppid=1 pid=679236 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=310 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:50:01.445:3622) : prog-id=350 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:50:01.445:3623) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:50:01.445:3623) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd7a1e1000 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=679236 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=310 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:50:01.445:3623) : prog-id=350 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:50:01.445:3624) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:50:01.445:3624) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd7a1e1010 a2=0x78 a3=0x7ffd7a1e1010 items=0 ppid=1 pid=679236 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=310 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:50:01.445:3624) : prog-id=351 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 14:50:01.445:3625) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 14:50:01.445:3625) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd7a1e1010 a2=0x78 a3=0x7ffd7a1e1010 items=0 ppid=1 pid=679236 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=310 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 14:50:01.445:3625) : prog-id=351 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 14:50:01.557:3626) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 14:50:01.572:3627) : pid=679233 uid=root auid=root ses=309 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 14:50:01.574:3628) : pid=679245 uid=root auid=root ses=309 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 14:50:01.576:3629) : pid=679233 uid=root auid=root ses=309 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 14:50:11.603:3630) : pid=679238 uid=root auid=root ses=310 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:50:11.603:3631) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 14:50:11.617:3632) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 15:00:01.789:3633) : pid=685051 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:00:01.790:3634) : pid=685051 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 15:00:01.791:3635) : pid=685051 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=311 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:00:01.791:3635) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 15:00:01.791:3635) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=685051 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 15:00:01.831:3636) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:00:01.849:3637) : pid=685055 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:00:01.849:3638) : pid=685055 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 15:00:01.850:3639) : pid=685055 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=312 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:00:01.850:3639) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:00:01.850:3639) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=685055 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=312 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 15:00:01.858:3640) : pid=685055 uid=root auid=root ses=312 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 15:00:01.890:3641) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:00:01.890:3641) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffed4e3b640 a2=0x78 a3=0x7ffed4e3b640 items=0 ppid=1 pid=685055 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=312 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:00:01.890:3641) : prog-id=352 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:00:01.890:3642) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:00:01.890:3642) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffed4e3b700 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=685055 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=312 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:00:01.890:3642) : prog-id=352 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:00:01.890:3643) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:00:01.890:3643) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffed4e3b710 a2=0x78 a3=0x7ffed4e3b710 items=0 ppid=1 pid=685055 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=312 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:00:01.890:3643) : prog-id=353 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:00:01.890:3644) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:00:01.890:3644) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffed4e3b710 a2=0x78 a3=0x7ffed4e3b710 items=0 ppid=1 pid=685055 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=312 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:00:01.890:3644) : prog-id=353 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 15:00:01.965:3645) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 15:00:01.973:3646) : pid=685051 uid=root auid=root ses=311 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:00:01.973:3647) : pid=685064 uid=root auid=root ses=311 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 15:00:01.976:3648) : pid=685051 uid=root auid=root ses=311 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 15:00:12.103:3649) : pid=685057 uid=root auid=root ses=312 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:00:12.104:3650) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:00:12.120:3651) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 15:01:01.656:3652) : pid=685676 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:01:01.657:3653) : pid=685676 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 15:01:01.657:3654) : pid=685676 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=313 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:01:01.657:3654) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 15:01:01.657:3654) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=685676 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=313 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 15:01:01.686:3655) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:01:01.692:3656) : pid=685679 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:01:01.692:3657) : pid=685679 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 15:01:01.693:3658) : pid=685679 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=314 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:01:01.693:3658) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:01:01.693:3658) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=685679 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=314 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 15:01:01.695:3659) : pid=685679 uid=root auid=root ses=314 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 15:01:01.716:3660) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:01:01.716:3660) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffe03e8350 a2=0x78 a3=0x7fffe03e8350 items=0 ppid=1 pid=685679 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=314 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:01:01.716:3660) : prog-id=354 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:01:01.716:3661) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:01:01.716:3661) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffe03e8410 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=685679 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=314 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:01:01.716:3661) : prog-id=354 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:01:01.716:3662) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:01:01.716:3662) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffe03e8420 a2=0x78 a3=0x7fffe03e8420 items=0 ppid=1 pid=685679 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=314 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:01:01.716:3662) : prog-id=355 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:01:01.717:3663) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:01:01.717:3663) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffe03e8420 a2=0x78 a3=0x7fffe03e8420 items=0 ppid=1 pid=685679 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=314 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:01:01.717:3663) : prog-id=355 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 15:01:01.781:3664) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 15:01:01.794:3665) : pid=685676 uid=root auid=root ses=313 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:01:01.795:3666) : pid=685688 uid=root auid=root ses=313 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 15:01:01.801:3667) : pid=685676 uid=root auid=root ses=313 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 15:01:11.854:3668) : pid=685681 uid=root auid=root ses=314 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:01:11.854:3669) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:01:11.865:3670) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 15:10:02.019:3671) : pid=690889 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:10:02.020:3672) : pid=690889 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 15:10:02.020:3673) : pid=690889 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=315 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:10:02.020:3673) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 15:10:02.020:3673) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=690889 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=315 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 15:10:02.059:3674) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:10:02.078:3675) : pid=690892 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:10:02.078:3676) : pid=690892 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 15:10:02.078:3677) : pid=690892 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=316 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:10:02.078:3677) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:10:02.078:3677) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=690892 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=316 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 15:10:02.081:3678) : pid=690892 uid=root auid=root ses=316 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 15:10:02.092:3679) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:10:02.092:3679) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffeac15280 a2=0x78 a3=0x7fffeac15280 items=0 ppid=1 pid=690892 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=316 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:10:02.092:3679) : prog-id=356 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:10:02.092:3680) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:10:02.092:3680) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffeac15340 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=690892 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=316 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:10:02.092:3680) : prog-id=356 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:10:02.092:3681) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:10:02.092:3681) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffeac15350 a2=0x78 a3=0x7fffeac15350 items=0 ppid=1 pid=690892 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=316 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:10:02.092:3681) : prog-id=357 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:10:02.092:3682) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:10:02.092:3682) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffeac15350 a2=0x78 a3=0x7fffeac15350 items=0 ppid=1 pid=690892 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=316 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:10:02.092:3682) : prog-id=357 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 15:10:02.142:3683) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 15:10:02.145:3684) : pid=690889 uid=root auid=root ses=315 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:10:02.145:3685) : pid=690901 uid=root auid=root ses=315 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 15:10:02.147:3686) : pid=690889 uid=root auid=root ses=315 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 15:10:12.352:3687) : pid=690894 uid=root auid=root ses=316 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:10:12.354:3688) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:10:12.367:3689) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 15:20:01.479:3690) : pid=696452 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:20:01.480:3691) : pid=696452 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 15:20:01.480:3692) : pid=696452 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=317 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:20:01.480:3692) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 15:20:01.480:3692) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=696452 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=317 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 15:20:01.505:3693) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:20:01.510:3694) : pid=696455 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:20:01.510:3695) : pid=696455 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 15:20:01.510:3696) : pid=696455 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=318 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:20:01.510:3696) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:20:01.510:3696) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=696455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=318 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 15:20:01.512:3697) : pid=696455 uid=root auid=root ses=318 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 15:20:01.528:3698) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:20:01.528:3698) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc97946ba0 a2=0x78 a3=0x7ffc97946ba0 items=0 ppid=1 pid=696455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=318 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:20:01.528:3698) : prog-id=358 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:20:01.528:3699) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:20:01.528:3699) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc97946c60 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=696455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=318 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:20:01.528:3699) : prog-id=358 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:20:01.528:3700) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:20:01.528:3700) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc97946c70 a2=0x78 a3=0x7ffc97946c70 items=0 ppid=1 pid=696455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=318 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:20:01.528:3700) : prog-id=359 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:20:01.528:3701) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:20:01.528:3701) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc97946c70 a2=0x78 a3=0x7ffc97946c70 items=0 ppid=1 pid=696455 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=318 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:20:01.528:3701) : prog-id=359 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 15:20:01.589:3702) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 15:20:01.594:3703) : pid=696452 uid=root auid=root ses=317 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:20:01.596:3704) : pid=696464 uid=root auid=root ses=317 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 15:20:01.598:3705) : pid=696452 uid=root auid=root ses=317 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:20:11.856:3706) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:20:11.866:3707) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 15:30:01.950:3708) : pid=702343 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:30:01.950:3709) : pid=702343 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 15:30:01.951:3710) : pid=702343 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=319 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:30:01.951:3710) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 15:30:01.951:3710) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=702343 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=319 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 15:30:01.974:3711) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:30:01.979:3712) : pid=702346 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:30:01.979:3713) : pid=702346 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 15:30:01.979:3714) : pid=702346 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=320 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:30:01.979:3714) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:30:01.979:3714) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=702346 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=320 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 15:30:01.981:3715) : pid=702346 uid=root auid=root ses=320 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 15:30:02.000:3716) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:30:02.000:3716) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcd1f6b720 a2=0x78 a3=0x7ffcd1f6b720 items=0 ppid=1 pid=702346 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=320 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:30:02.000:3716) : prog-id=360 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:30:02.000:3717) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:30:02.000:3717) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcd1f6b7e0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=702346 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=320 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:30:02.000:3717) : prog-id=360 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:30:02.000:3718) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:30:02.000:3718) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffcd1f6b7f0 a2=0x78 a3=0x7ffcd1f6b7f0 items=0 ppid=1 pid=702346 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=320 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:30:02.000:3718) : prog-id=361 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:30:02.000:3719) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:30:02.000:3719) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffcd1f6b7f0 a2=0x78 a3=0x7ffcd1f6b7f0 items=0 ppid=1 pid=702346 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=320 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:30:02.000:3719) : prog-id=361 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 15:30:02.056:3720) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 15:30:02.059:3721) : pid=702343 uid=root auid=root ses=319 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:30:02.060:3722) : pid=702355 uid=root auid=root ses=319 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 15:30:02.062:3723) : pid=702343 uid=root auid=root ses=319 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:30:12.110:3724) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:30:12.125:3725) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 15:40:01.414:3726) : pid=707945 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:40:01.415:3727) : pid=707945 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 15:40:01.415:3728) : pid=707945 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=321 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:40:01.415:3728) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 15:40:01.415:3728) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=707945 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=321 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 15:40:01.440:3729) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:40:01.448:3730) : pid=707948 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:40:01.448:3731) : pid=707948 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 15:40:01.448:3732) : pid=707948 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=322 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:40:01.448:3732) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:40:01.448:3732) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=707948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=322 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 15:40:01.452:3733) : pid=707948 uid=root auid=root ses=322 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 15:40:01.469:3734) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:40:01.469:3734) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe5f02c8b0 a2=0x78 a3=0x7ffe5f02c8b0 items=0 ppid=1 pid=707948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=322 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:40:01.469:3734) : prog-id=362 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:40:01.469:3735) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:40:01.469:3735) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe5f02c970 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=707948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=322 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:40:01.469:3735) : prog-id=362 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:40:01.469:3736) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:40:01.469:3736) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffe5f02c980 a2=0x78 a3=0x7ffe5f02c980 items=0 ppid=1 pid=707948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=322 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:40:01.469:3736) : prog-id=363 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:40:01.469:3737) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:40:01.469:3737) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffe5f02c980 a2=0x78 a3=0x7ffe5f02c980 items=0 ppid=1 pid=707948 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=322 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:40:01.469:3737) : prog-id=363 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 15:40:01.527:3738) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 15:40:01.534:3739) : pid=707945 uid=root auid=root ses=321 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:40:01.534:3740) : pid=707957 uid=root auid=root ses=321 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 15:40:01.537:3741) : pid=707945 uid=root auid=root ses=321 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 15:40:11.604:3742) : pid=707950 uid=root auid=root ses=322 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:40:11.605:3743) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:40:11.619:3744) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 15:50:01.851:3745) : pid=713829 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:50:01.852:3746) : pid=713829 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 15:50:01.852:3747) : pid=713829 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=323 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:50:01.852:3747) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 15:50:01.852:3747) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=713829 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=323 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 15:50:01.869:3748) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 15:50:01.874:3749) : pid=713832 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:50:01.874:3750) : pid=713832 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 15:50:01.874:3751) : pid=713832 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=324 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 15:50:01.874:3751) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:50:01.874:3751) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=713832 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=324 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 15:50:01.875:3752) : pid=713832 uid=root auid=root ses=324 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 15:50:01.889:3753) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:50:01.889:3753) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff715a8630 a2=0x78 a3=0x7fff715a8630 items=0 ppid=1 pid=713832 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=324 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:50:01.889:3753) : prog-id=364 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:50:01.889:3754) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:50:01.889:3754) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff715a86f0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=713832 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=324 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:50:01.889:3754) : prog-id=364 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:50:01.889:3755) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:50:01.889:3755) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff715a8700 a2=0x78 a3=0x7fff715a8700 items=0 ppid=1 pid=713832 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=324 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:50:01.889:3755) : prog-id=365 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 15:50:01.889:3756) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 15:50:01.889:3756) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff715a8700 a2=0x78 a3=0x7fff715a8700 items=0 ppid=1 pid=713832 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=324 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 15:50:01.889:3756) : prog-id=365 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 15:50:01.954:3757) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 15:50:01.959:3758) : pid=713829 uid=root auid=root ses=323 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 15:50:01.960:3759) : pid=713841 uid=root auid=root ses=323 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 15:50:01.962:3760) : pid=713829 uid=root auid=root ses=323 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 15:50:12.105:3761) : pid=713834 uid=root auid=root ses=324 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:50:12.105:3762) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 15:50:12.114:3763) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 16:00:01.333:3764) : pid=719901 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:00:01.334:3765) : pid=719901 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 16:00:01.334:3766) : pid=719901 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=325 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:00:01.334:3766) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 16:00:01.334:3766) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=719901 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=325 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 16:00:01.368:3767) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:00:01.375:3768) : pid=719904 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:00:01.376:3769) : pid=719904 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 16:00:01.376:3770) : pid=719904 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=326 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:00:01.376:3770) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:00:01.376:3770) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=719904 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=326 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 16:00:01.377:3771) : pid=719904 uid=root auid=root ses=326 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 16:00:01.397:3772) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:00:01.397:3772) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc3bfcbce0 a2=0x78 a3=0x7ffc3bfcbce0 items=0 ppid=1 pid=719904 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=326 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:00:01.397:3772) : prog-id=366 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:00:01.397:3773) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:00:01.397:3773) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc3bfcbda0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=719904 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=326 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:00:01.397:3773) : prog-id=366 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:00:01.397:3774) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:00:01.397:3774) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc3bfcbdb0 a2=0x78 a3=0x7ffc3bfcbdb0 items=0 ppid=1 pid=719904 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=326 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:00:01.397:3774) : prog-id=367 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:00:01.397:3775) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:00:01.397:3775) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc3bfcbdb0 a2=0x78 a3=0x7ffc3bfcbdb0 items=0 ppid=1 pid=719904 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=326 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:00:01.397:3775) : prog-id=367 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 16:00:01.464:3776) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 16:00:01.474:3777) : pid=719901 uid=root auid=root ses=325 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:00:01.474:3778) : pid=719913 uid=root auid=root ses=325 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 16:00:01.477:3779) : pid=719901 uid=root auid=root ses=325 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 16:00:11.601:3780) : pid=719906 uid=root auid=root ses=326 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:00:11.601:3781) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:00:11.614:3782) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 16:01:01.235:3783) : pid=720402 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:01:01.236:3784) : pid=720402 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 16:01:01.236:3785) : pid=720402 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=327 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:01:01.236:3785) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 16:01:01.236:3785) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=720402 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=327 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 16:01:01.260:3786) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:01:01.265:3787) : pid=720405 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:01:01.265:3788) : pid=720405 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 16:01:01.265:3789) : pid=720405 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=328 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:01:01.265:3789) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:01:01.265:3789) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=720405 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=328 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 16:01:01.267:3790) : pid=720405 uid=root auid=root ses=328 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 16:01:01.281:3791) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:01:01.281:3791) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffcbe554b0 a2=0x78 a3=0x7fffcbe554b0 items=0 ppid=1 pid=720405 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=328 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:01:01.281:3791) : prog-id=368 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:01:01.281:3792) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:01:01.281:3792) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffcbe55570 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=720405 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=328 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:01:01.281:3792) : prog-id=368 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:01:01.281:3793) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:01:01.281:3793) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffcbe55580 a2=0x78 a3=0x7fffcbe55580 items=0 ppid=1 pid=720405 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=328 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:01:01.281:3793) : prog-id=369 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:01:01.281:3794) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:01:01.281:3794) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffcbe55580 a2=0x78 a3=0x7fffcbe55580 items=0 ppid=1 pid=720405 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=328 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:01:01.281:3794) : prog-id=369 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 16:01:01.336:3795) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 16:01:01.340:3796) : pid=720402 uid=root auid=root ses=327 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:01:01.340:3797) : pid=720415 uid=root auid=root ses=327 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 16:01:01.346:3798) : pid=720402 uid=root auid=root ses=327 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:01:11.604:3799) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:01:11.620:3800) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 16:10:01.627:3801) : pid=725908 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:10:01.631:3802) : pid=725908 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 16:10:01.631:3803) : pid=725908 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=329 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:10:01.631:3803) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 16:10:01.631:3803) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=725908 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=329 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 16:10:01.678:3804) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:10:01.699:3805) : pid=725911 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:10:01.699:3806) : pid=725911 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 16:10:01.699:3807) : pid=725911 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=330 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:10:01.699:3807) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:10:01.699:3807) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=725911 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=330 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 16:10:01.702:3808) : pid=725911 uid=root auid=root ses=330 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 16:10:01.723:3809) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:10:01.723:3809) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff130a7b00 a2=0x78 a3=0x7fff130a7b00 items=0 ppid=1 pid=725911 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=330 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:10:01.723:3809) : prog-id=370 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:10:01.723:3810) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:10:01.723:3810) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff130a7bc0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=725911 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=330 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:10:01.723:3810) : prog-id=370 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:10:01.723:3811) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:10:01.723:3811) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff130a7bd0 a2=0x78 a3=0x7fff130a7bd0 items=0 ppid=1 pid=725911 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=330 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:10:01.723:3811) : prog-id=371 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:10:01.723:3812) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:10:01.723:3812) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff130a7bd0 a2=0x78 a3=0x7fff130a7bd0 items=0 ppid=1 pid=725911 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=330 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:10:01.723:3812) : prog-id=371 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 16:10:01.826:3813) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 16:10:01.840:3814) : pid=725908 uid=root auid=root ses=329 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:10:01.842:3815) : pid=725920 uid=root auid=root ses=329 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 16:10:01.846:3816) : pid=725908 uid=root auid=root ses=329 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:10:12.107:3817) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:10:12.118:3818) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 16:20:01.983:3819) : pid=731308 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:20:01.984:3820) : pid=731308 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 16:20:01.984:3821) : pid=731308 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=331 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:20:01.984:3821) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 16:20:01.984:3821) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=731308 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=331 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 16:20:02.015:3822) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:20:02.020:3823) : pid=731311 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:20:02.020:3824) : pid=731311 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 16:20:02.020:3825) : pid=731311 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=332 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:20:02.020:3825) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:20:02.020:3825) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=731311 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=332 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 16:20:02.021:3826) : pid=731311 uid=root auid=root ses=332 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 16:20:02.025:3827) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:20:02.025:3827) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff503747c0 a2=0x78 a3=0x7fff503747c0 items=0 ppid=1 pid=731311 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=332 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:20:02.025:3827) : prog-id=372 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:20:02.026:3828) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:20:02.026:3828) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff50374880 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=731311 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=332 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:20:02.026:3828) : prog-id=372 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:20:02.026:3829) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:20:02.026:3829) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff50374890 a2=0x78 a3=0x7fff50374890 items=0 ppid=1 pid=731311 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=332 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:20:02.026:3829) : prog-id=373 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:20:02.026:3830) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:20:02.026:3830) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff50374890 a2=0x78 a3=0x7fff50374890 items=0 ppid=1 pid=731311 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=332 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:20:02.026:3830) : prog-id=373 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 16:20:02.078:3831) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 16:20:02.089:3832) : pid=731308 uid=root auid=root ses=331 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:20:02.091:3833) : pid=731321 uid=root auid=root ses=331 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 16:20:02.095:3834) : pid=731308 uid=root auid=root ses=331 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 16:20:12.353:3835) : pid=731313 uid=root auid=root ses=332 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:20:12.354:3836) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:20:12.376:3837) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 16:30:01.459:3838) : pid=737170 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:30:01.460:3839) : pid=737170 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 16:30:01.460:3840) : pid=737170 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=333 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:30:01.460:3840) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 16:30:01.460:3840) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=737170 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=333 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 16:30:01.479:3841) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:30:01.490:3842) : pid=737173 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:30:01.490:3843) : pid=737173 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 16:30:01.490:3844) : pid=737173 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=334 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:30:01.490:3844) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:30:01.490:3844) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=737173 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=334 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 16:30:01.493:3845) : pid=737173 uid=root auid=root ses=334 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 16:30:01.511:3846) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:30:01.511:3846) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd1e170b60 a2=0x78 a3=0x7ffd1e170b60 items=0 ppid=1 pid=737173 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=334 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:30:01.511:3846) : prog-id=374 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:30:01.511:3847) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:30:01.511:3847) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd1e170c20 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=737173 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=334 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:30:01.511:3847) : prog-id=374 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:30:01.511:3848) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:30:01.511:3848) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffd1e170c30 a2=0x78 a3=0x7ffd1e170c30 items=0 ppid=1 pid=737173 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=334 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:30:01.511:3848) : prog-id=375 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:30:01.511:3849) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:30:01.511:3849) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffd1e170c30 a2=0x78 a3=0x7ffd1e170c30 items=0 ppid=1 pid=737173 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=334 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:30:01.511:3849) : prog-id=375 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 16:30:01.571:3850) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 16:30:01.580:3851) : pid=737170 uid=root auid=root ses=333 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:30:01.582:3852) : pid=737183 uid=root auid=root ses=333 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 16:30:01.587:3853) : pid=737170 uid=root auid=root ses=333 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 16:30:11.605:3854) : pid=737175 uid=root auid=root ses=334 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:30:11.606:3855) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:30:11.631:3856) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 16:40:01.924:3857) : pid=743622 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:40:01.925:3858) : pid=743622 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 16:40:01.925:3859) : pid=743622 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=335 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:40:01.925:3859) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 16:40:01.925:3859) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=743622 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=335 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 16:40:01.943:3860) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:40:01.950:3861) : pid=743625 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:40:01.950:3862) : pid=743625 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 16:40:01.950:3863) : pid=743625 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=336 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:40:01.950:3863) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:40:01.950:3863) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=743625 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=336 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 16:40:01.952:3864) : pid=743625 uid=root auid=root ses=336 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 16:40:01.966:3865) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:40:01.966:3865) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc95f15f50 a2=0x78 a3=0x7ffc95f15f50 items=0 ppid=1 pid=743625 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=336 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:40:01.966:3865) : prog-id=376 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:40:01.966:3866) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:40:01.966:3866) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc95f16010 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=743625 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=336 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:40:01.966:3866) : prog-id=376 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:40:01.966:3867) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:40:01.966:3867) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7ffc95f16020 a2=0x78 a3=0x7ffc95f16020 items=0 ppid=1 pid=743625 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=336 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:40:01.966:3867) : prog-id=377 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:40:01.966:3868) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:40:01.966:3868) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7ffc95f16020 a2=0x78 a3=0x7ffc95f16020 items=0 ppid=1 pid=743625 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=336 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:40:01.966:3868) : prog-id=377 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 16:40:02.024:3869) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 16:40:02.028:3870) : pid=743622 uid=root auid=root ses=335 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:40:02.029:3871) : pid=743634 uid=root auid=root ses=335 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 16:40:02.031:3872) : pid=743622 uid=root auid=root ses=335 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 16:40:12.107:3873) : pid=743627 uid=root auid=root ses=336 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:40:12.107:3874) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:40:12.121:3875) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 16:50:01.397:3876) : pid=749456 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:50:01.398:3877) : pid=749456 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 16:50:01.398:3878) : pid=749456 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=337 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:50:01.398:3878) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 16:50:01.398:3878) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=749456 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=337 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 16:50:01.422:3879) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 16:50:01.428:3880) : pid=749459 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:50:01.428:3881) : pid=749459 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 16:50:01.428:3882) : pid=749459 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=338 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 16:50:01.428:3882) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:50:01.428:3882) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=749459 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=338 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 16:50:01.431:3883) : pid=749459 uid=root auid=root ses=338 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 16:50:01.445:3884) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:50:01.445:3884) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff51a9eb90 a2=0x78 a3=0x7fff51a9eb90 items=0 ppid=1 pid=749459 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=338 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:50:01.445:3884) : prog-id=378 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:50:01.445:3885) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:50:01.445:3885) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff51a9ec50 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=749459 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=338 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:50:01.445:3885) : prog-id=378 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:50:01.445:3886) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:50:01.445:3886) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff51a9ec60 a2=0x78 a3=0x7fff51a9ec60 items=0 ppid=1 pid=749459 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=338 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:50:01.445:3886) : prog-id=379 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 16:50:01.445:3887) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 16:50:01.445:3887) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff51a9ec60 a2=0x78 a3=0x7fff51a9ec60 items=0 ppid=1 pid=749459 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=338 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 16:50:01.445:3887) : prog-id=379 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 16:50:01.518:3888) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 16:50:01.528:3889) : pid=749456 uid=root auid=root ses=337 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 16:50:01.528:3890) : pid=749468 uid=root auid=root ses=337 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 16:50:01.533:3891) : pid=749456 uid=root auid=root ses=337 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 16:50:11.608:3892) : pid=749461 uid=root auid=root ses=338 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:50:11.609:3893) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 16:50:11.621:3894) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:00:13.762:3895) : pid=754132 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:00:14.226:3896) : pid=754132 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:00:14.597:3897) : pid=754132 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=339 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:00:14.597:3897) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 17:00:14.597:3897) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=754132 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=339 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 17:00:24.480:3898) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:00:27.240:3899) : pid=754200 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:00:27.254:3900) : pid=754200 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 17:00:27.381:3901) : pid=754200 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=340 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:00:27.381:3901) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:00:27.381:3901) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffe0cced2b0 a2=0x1 a3=0x7f3794925459 items=0 ppid=1 pid=754200 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=340 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 17:00:58.740:3902) : pid=754200 uid=root auid=root ses=340 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:01:15.475:3903) : pid=754229 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:01:18.478:3904) : pid=754229 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:01:19.953:3905) : pid=754229 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=341 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:01:19.953:3905) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 17:01:19.953:3905) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7fff43befce0 a2=0x1 a3=0x7f062d347459 items=0 ppid=2895 pid=754229 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=341 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=USER_AUTH msg=audit(13.03.2026 17:01:43.893:3906) : pid=2899 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_securetty,pam_tcb acct=root exe=/bin/login hostname=datapk addr=? terminal=/dev/tty1 res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:01:44.355:3907) : pid=2899 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/bin/login hostname=datapk addr=? terminal=/dev/tty1 res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:01:44.888:3908) : pid=2899 uid=root old-auid=unset auid=root tty=tty1 old-ses=4294967295 ses=342 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:01:44.888:3908) : proctitle=/bin/login -p -- root 
type=SYSCALL msg=audit(13.03.2026 17:01:44.888:3908) : arch=x86_64 syscall=write success=yes exit=1 a0=0x4 a1=0x7ffe796ca890 a2=0x1 a3=0x7f6f550c2459 items=0 ppid=1 pid=2899 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=tty1 ses=342 comm=login exe=/bin/login key=(null) 
----
type=CRED_DISP msg=audit(13.03.2026 17:02:12.830:3909) : pid=754227 uid=root auid=root ses=340 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=USER_START msg=audit(13.03.2026 17:02:19.720:3910) : pid=754132 uid=root auid=root ses=339 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:02:22.239:3911) : pid=754330 uid=root auid=root ses=339 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 17:02:29.687:3912) : pid=754132 uid=root auid=root ses=339 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=DAEMON_START msg=audit(13.03.2026 17:02:55.286:1233) : op=start ver=3.1.2 format=enriched kernel=6.12.73-6.12-alt0.c10f.2 auid=unset pid=2395 uid=root ses=unset res=success 
----
type=PROCTITLE msg=audit(13.03.2026 17:02:55.314:3) : proctitle=/sbin/auditctl -R /etc/audit/audit.rules 
type=SYSCALL msg=audit(13.03.2026 17:02:55.314:3) : arch=x86_64 syscall=sendto success=yes exit=60 a0=0x3 a1=0x7fff381eef20 a2=0x3c a3=0x0 items=0 ppid=2402 pid=2420 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=auditctl exe=/sbin/auditctl key=(null) 
type=CONFIG_CHANGE msg=audit(13.03.2026 17:02:55.314:3) : op=set audit_backlog_limit=8192 old=64 auid=unset ses=unset res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:02:55.314:4) : proctitle=/sbin/auditctl -R /etc/audit/audit.rules 
type=SYSCALL msg=audit(13.03.2026 17:02:55.314:4) : arch=x86_64 syscall=sendto success=yes exit=60 a0=0x3 a1=0x7fff381eef20 a2=0x3c a3=0x0 items=0 ppid=2402 pid=2420 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=auditctl exe=/sbin/auditctl key=(null) 
type=CONFIG_CHANGE msg=audit(13.03.2026 17:02:55.314:4) : op=set audit_failure=1 old=1 auid=unset ses=unset res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:02:55.314:5) : proctitle=/sbin/auditctl -R /etc/audit/audit.rules 
type=SYSCALL msg=audit(13.03.2026 17:02:55.314:5) : arch=x86_64 syscall=sendto success=yes exit=60 a0=0x3 a1=0x7fff381eef20 a2=0x3c a3=0x0 items=0 ppid=2402 pid=2420 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=auditctl exe=/sbin/auditctl key=(null) 
type=CONFIG_CHANGE msg=audit(13.03.2026 17:02:55.314:5) : op=set audit_backlog_wait_time=60000 old=60000 auid=unset ses=unset res=yes 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:55.317:6) : pid=1 uid=root auid=unset ses=unset msg='unit=auditd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SYSTEM_BOOT msg=audit(13.03.2026 17:02:55.333:7) : pid=2427 uid=root auid=unset ses=unset msg=' comm=systemd-update-utmp exe=/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:55.338:8) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-update-utmp comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:56.170:9) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-udev-settle comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:57.827:10) : pid=1 uid=root auid=unset ses=unset msg='unit=integalert comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=BPF msg=audit(13.03.2026 17:02:57.851:11) : prog-id=12 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:57.868:12) : pid=1 uid=root auid=unset ses=unset msg='unit=daemontools comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:57.891:13) : pid=1 uid=root auid=unset ses=unset msg='unit=nscd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:02:57.892:14) : prog-id=13 op=LOAD 
----
type=BPF msg=audit(13.03.2026 17:02:57.892:15) : prog-id=14 op=LOAD 
----
type=BPF msg=audit(13.03.2026 17:02:57.892:16) : prog-id=15 op=LOAD 
----
type=BPF msg=audit(13.03.2026 17:02:57.896:17) : prog-id=16 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:57.908:18) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alertmanager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:02:57.943:19) : prog-id=17 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:57.948:20) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:02:57.949:21) : prog-id=18 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:57.953:22) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-node-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:02:57.980:23) : prog-id=19 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.004:24) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:02:58.015:25) : prog-id=20 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.071:26) : pid=1 uid=root auid=unset ses=unset msg='unit=vgauthd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.081:27) : pid=1 uid=root auid=unset ses=unset msg='unit=vmtoolsd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.084:28) : pid=1 uid=root auid=unset ses=unset msg='unit=dbus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.099:29) : pid=1 uid=root auid=unset ses=unset msg='unit=chronyd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.104:30) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-logind comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.184:31) : pid=1 uid=root auid=unset ses=unset msg='unit=network comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:02:58.315:32) : prog-id=21 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.469:33) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.538:34) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rsyslog comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.593:35) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-user-sessions comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.658:36) : pid=1 uid=root auid=unset ses=unset msg='unit=crond comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.672:37) : pid=1 uid=root auid=unset ses=unset msg='unit=getty@tty1 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.727:38) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.748:39) : pid=1 uid=root auid=unset ses=unset msg='unit=nslcd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.767:40) : pid=1 uid=root auid=unset ses=unset msg='unit=sshd comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.916:41) : pid=1 uid=root auid=unset ses=unset msg='unit=vconsole-setup-kludge@tty1 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.937:42) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.956:43) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-prometheus comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.960:44) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.960:45) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.960:46) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.962:47) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:58.962:48) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.004:49) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-stunnel-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.317:50) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.391:51) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.500:52) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.500:53) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:02:59.502:54) : prog-id=22 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.514:55) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-stunnel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:02:59.520:56) : prog-id=23 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.566:57) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-postgresql comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.904:58) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nginx comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.918:59) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-config-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:02:59.996:60) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:00.014:61) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-redis-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:00.202:62) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:00.353:63) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-exporter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:00.394:64) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:00.415:65) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-modbus-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:00.478:66) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-terminal-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:00.823:67) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-enrich-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:00.984:68) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-auth-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:01.021:69) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:01.116:70) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-msrpc comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:01.142:71) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sql-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:01.181:72) : pid=1 uid=root auid=unset ses=unset msg='unit=postfix comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:01.279:73) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-plc-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:01.461:74) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:01.728:75) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-report-generator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:01.777:76) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-snmp-connector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:02.125:77) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-page-views-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:03.268:78) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-external-api comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:04.061:79) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-mariadb comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:03:04.100:80) : prog-id=24 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:04.119:81) : pid=1 uid=root auid=unset ses=unset msg='unit=epmd@0.0.0.0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:04.342:82) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-clickhouse-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:05.902:83) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dpi-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:06.405:84) : pid=1 uid=root auid=unset ses=unset msg='unit=polkit comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:06.430:85) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 17:03:09.135:86) : proctitle=/usr/bin/suricata -c /run/udv/suricata-wrapper/suricata.yml -s /run/udv/suricata-wrapper/suricata.rules -vv --af-packet 
type=SYSCALL msg=audit(13.03.2026 17:03:09.135:86) : arch=x86_64 syscall=setsockopt success=yes exit=0 a0=0x6 a1=SOL_PACKET a2=PACKET_ADD_MEMBERSHIP a3=0x7f50d249d240 items=0 ppid=1 pid=4279 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=W#01-ens33 exe=/usr/bin/suricata key=(null) 
type=ANOM_PROMISCUOUS msg=audit(13.03.2026 17:03:09.135:86) : dev=ens33 prom=yes old_prom=no auid=unset uid=root gid=root ses=unset 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:14.982:87) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:15.023:88) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq-exporter-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:15.130:89) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rabbitmq comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:16.044:90) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-heartbeat comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:16.224:91) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-activity-logger comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:16.278:92) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:16.408:93) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:03:16.408:94) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensor-registrar comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:16.435:95) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-filter comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:17.182:96) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-pushgateway-cleaner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:17.215:97) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:17.486:98) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-watcher comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:17.745:99) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vulnerability-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:18.177:100) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-nmap-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:18.336:101) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:18.592:102) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-stenographer comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:18.616:103) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-steno-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:18.648:104) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-files-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:18.665:105) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-sensors-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:19.490:106) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-receiver comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:19.982:107) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:20.018:108) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-alerting comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:20.090:109) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-software-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:20.440:110) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-suricata-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:20.831:111) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:20.846:112) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-hosts-bff comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:20.931:113) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-command-processor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:21.110:114) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-rules-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:21.317:115) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-incident-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:21.352:116) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-configs-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:21.621:117) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:21.622:118) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-tags-control-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:21.956:119) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-user-service comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:22.242:120) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:22.483:121) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:22.550:122) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-oval-scanner comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:03:22.731:123) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-event-correlator comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:22.878:124) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-manager comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:23.137:125) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-zeek-wrapper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:23.370:126) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:23.378:127) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-logstash comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:23.409:128) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-dashboards comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:23.790:129) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-esper comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:24.888:130) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-opensearch-controller comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:25.160:131) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-host-data-collector comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:34.704:132) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:35.389:133) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-system-backend-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:46.987:134) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-dns-classifier comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=BPF msg=audit(13.03.2026 17:03:46.988:135) : prog-id=25 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:46.997:136) : pid=1 uid=root auid=unset ses=unset msg='unit=udv-vector-sensor comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SYSTEM_RUNLEVEL msg=audit(13.03.2026 17:03:47.008:137) : pid=5240 uid=root auid=unset ses=unset msg='old-level=N new-level=3 comm=systemd-update-utmp exe=/lib/systemd/systemd-update-utmp hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:03:47.017:138) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-update-utmp-runlevel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:03:47.017:139) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-update-utmp-runlevel comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:10:01.107:140) : pid=9773 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:10:01.111:141) : pid=9773 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:10:01.111:142) : pid=9773 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=1 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:10:01.111:142) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 17:10:01.111:142) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffde19e4810 a2=0x1 a3=0x7f9e79f2c459 items=0 ppid=2760 pid=9773 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=1 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 17:10:01.141:143) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:10:01.152:144) : pid=9776 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:10:01.153:145) : pid=9776 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 17:10:01.153:146) : pid=9776 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=2 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:10:01.153:146) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:10:01.153:146) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffee6a85e50 a2=0x1 a3=0x7fad754fe459 items=0 ppid=1 pid=9776 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 17:10:01.160:147) : pid=9776 uid=root auid=root ses=2 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 17:10:01.177:148) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:10:01.177:148) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9c950e20 a2=0x78 a3=0x7fff9c950e20 items=0 ppid=1 pid=9776 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:10:01.177:148) : prog-id=26 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:10:01.177:149) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:10:01.177:149) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9c950ee0 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=9776 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:10:01.177:149) : prog-id=26 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:10:01.177:150) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:10:01.177:150) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff9c950ef0 a2=0x78 a3=0x7fff9c950ef0 items=0 ppid=1 pid=9776 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:10:01.177:150) : prog-id=27 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:10:01.177:151) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:10:01.177:151) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff9c950ef0 a2=0x78 a3=0x7fff9c950ef0 items=0 ppid=1 pid=9776 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=2 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:10:01.177:151) : prog-id=27 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:10:01.287:152) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 17:10:01.301:153) : pid=9773 uid=root auid=root ses=1 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:10:01.302:154) : pid=9786 uid=root auid=root ses=1 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 17:10:01.305:155) : pid=9773 uid=root auid=root ses=1 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 17:10:11.536:156) : pid=9779 uid=root auid=root ses=2 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:10:11.536:157) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:10:11.550:158) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:11:19.547:159) : pid=10411 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:11:19.559:160) : pid=10411 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:11:19.560:161) : pid=10411 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:11:19.562:162) : pid=10411 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=3 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:11:19.562:162) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(13.03.2026 17:11:19.562:162) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffffa05ce10 a2=0x3 a3=0x7faa6690c459 items=0 ppid=2800 pid=10411 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=3 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 17:11:19.581:163) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@500 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:11:19.587:164) : pid=10426 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:11:19.587:165) : pid=10426 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=datapk exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 17:11:19.587:166) : pid=10426 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=4 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:11:19.587:166) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:11:19.587:166) : arch=x86_64 syscall=write success=yes exit=3 a0=0x8 a1=0x7ffee6a85e50 a2=0x3 a3=0x7fad754fe459 items=0 ppid=1 pid=10426 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=4 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 17:11:19.589:167) : pid=10426 uid=root auid=datapk ses=4 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=datapk exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:11:19.648:168) : pid=10422 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:11:19.649:169) : pid=10422 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:11:19.650:170) : pid=10422 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:11:19.650:171) : pid=10422 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=5 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:11:19.650:171) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(13.03.2026 17:11:19.650:171) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffc47222180 a2=0x3 a3=0x7f566d094459 items=0 ppid=2800 pid=10422 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=5 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 17:11:19.658:172) : pid=1 uid=root auid=unset ses=unset msg='unit=user@500 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 17:11:19.663:173) : pid=10411 uid=root auid=datapk ses=3 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:11:19.664:174) : pid=10440 uid=root auid=datapk ses=3 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_START msg=audit(13.03.2026 17:11:19.665:175) : pid=10422 uid=root auid=datapk ses=5 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:11:19.666:176) : pid=10441 uid=root auid=datapk ses=5 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_LOGIN msg=audit(13.03.2026 17:11:21.805:177) : pid=10411 uid=root auid=datapk ses=3 msg='op=login id=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=/dev/pts/0 res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:12:40.280:178) : pid=11537 uid=datapk auid=datapk ses=3 msg='op=PAM:authentication grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:12:40.281:179) : pid=11537 uid=datapk auid=datapk ses=3 msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=USER_START msg=audit(13.03.2026 17:12:40.283:180) : pid=11537 uid=datapk auid=datapk ses=3 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_xauth acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:12:40.284:181) : pid=11537 uid=datapk auid=datapk ses=3 msg='op=PAM:setcred grantors=pam_tcb acct=root exe=/bin/su hostname=localhost addr=127.0.0.1 terminal=/dev/pts/0 res=success' 
----
type=SERVICE_START msg=audit(13.03.2026 17:17:54.807:182) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-tmpfiles-clean comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:17:54.807:183) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-tmpfiles-clean comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:20:01.477:184) : pid=18632 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:20:01.478:185) : pid=18632 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:20:01.478:186) : pid=18632 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=6 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:20:01.478:186) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 17:20:01.478:186) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffde19e4810 a2=0x1 a3=0x7f9e79f2c459 items=0 ppid=2760 pid=18632 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=6 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 17:20:01.499:187) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:20:01.503:188) : pid=18635 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:20:01.503:189) : pid=18635 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 17:20:01.503:190) : pid=18635 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=7 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:20:01.503:190) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:20:01.503:190) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffee6a85e50 a2=0x1 a3=0x7fad754fe459 items=0 ppid=1 pid=18635 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=7 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 17:20:01.505:191) : pid=18635 uid=root auid=root ses=7 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 17:20:01.519:192) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:20:01.519:192) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff90367860 a2=0x78 a3=0x7fff90367860 items=0 ppid=1 pid=18635 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=7 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:20:01.519:192) : prog-id=28 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:20:01.519:193) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:20:01.519:193) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff90367920 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=18635 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=7 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:20:01.519:193) : prog-id=28 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:20:01.520:194) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:20:01.520:194) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fff90367930 a2=0x78 a3=0x7fff90367930 items=0 ppid=1 pid=18635 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=7 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:20:01.520:194) : prog-id=29 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:20:01.520:195) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:20:01.520:195) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fff90367930 a2=0x78 a3=0x7fff90367930 items=0 ppid=1 pid=18635 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=7 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:20:01.520:195) : prog-id=29 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:20:01.580:196) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 17:20:01.585:197) : pid=18632 uid=root auid=root ses=6 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:20:01.586:198) : pid=18645 uid=root auid=root ses=6 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 17:20:01.587:199) : pid=18632 uid=root auid=root ses=6 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 17:20:11.782:200) : pid=18637 uid=root auid=root ses=7 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:20:11.782:201) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:20:11.797:202) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:30:01.938:203) : pid=28133 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:30:01.939:204) : pid=28133 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:30:01.939:205) : pid=28133 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=8 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:30:01.939:205) : proctitle=crond: job root 
type=SYSCALL msg=audit(13.03.2026 17:30:01.939:205) : arch=x86_64 syscall=write success=yes exit=1 a0=0x9 a1=0x7ffde19e4810 a2=0x1 a3=0x7f9e79f2c459 items=0 ppid=2760 pid=28133 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=8 comm=crond exe=/usr/sbin/crond key=(null) 
----
type=SERVICE_START msg=audit(13.03.2026 17:30:01.961:206) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:30:01.966:207) : pid=28136 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:30:01.966:208) : pid=28136 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=LOGIN msg=audit(13.03.2026 17:30:01.966:209) : pid=28136 uid=root old-auid=unset auid=root tty=(none) old-ses=4294967295 ses=9 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:30:01.966:209) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:30:01.966:209) : arch=x86_64 syscall=write success=yes exit=1 a0=0x8 a1=0x7ffee6a85e50 a2=0x1 a3=0x7fad754fe459 items=0 ppid=1 pid=28136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=9 comm=(systemd) exe=/lib/systemd/systemd key=(null) 
----
type=USER_START msg=audit(13.03.2026 17:30:01.968:210) : pid=28136 uid=root auid=root ses=9 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd,pam_loginuid,pam_keyinit acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=PROCTITLE msg=audit(13.03.2026 17:30:01.988:211) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:30:01.988:211) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffbbdfc150 a2=0x78 a3=0x7fffbbdfc150 items=0 ppid=1 pid=28136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=9 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:30:01.988:211) : prog-id=30 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:30:01.988:212) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:30:01.988:212) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffbbdfc210 a2=0x78 a3=0x200000008 items=0 ppid=1 pid=28136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=9 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:30:01.988:212) : prog-id=30 op=UNLOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:30:01.988:213) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:30:01.988:213) : arch=x86_64 syscall=bpf success=yes exit=8 a0=BPF_PROG_LOAD a1=0x7fffbbdfc220 a2=0x78 a3=0x7fffbbdfc220 items=0 ppid=1 pid=28136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=9 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:30:01.988:213) : prog-id=31 op=LOAD 
----
type=PROCTITLE msg=audit(13.03.2026 17:30:01.988:214) : proctitle=(systemd) 
type=SYSCALL msg=audit(13.03.2026 17:30:01.988:214) : arch=x86_64 syscall=close success=yes exit=0 a0=0x8 a1=0x7fffbbdfc220 a2=0x78 a3=0x7fffbbdfc220 items=0 ppid=1 pid=28136 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=9 comm=systemd exe=/lib/systemd/systemd key=(null) 
type=BPF msg=audit(13.03.2026 17:30:01.988:214) : prog-id=31 op=UNLOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:30:02.039:215) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_START msg=audit(13.03.2026 17:30:02.042:216) : pid=28133 uid=root auid=root ses=8 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:30:02.042:217) : pid=28145 uid=root auid=root ses=8 msg='op=PAM:setcred grantors=pam_rootok acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=USER_END msg=audit(13.03.2026 17:30:02.043:218) : pid=28133 uid=root auid=root ses=8 msg='op=PAM:session_close grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=root exe=/usr/sbin/crond hostname=? addr=? terminal=? res=success' 
----
type=CRED_DISP msg=audit(13.03.2026 17:30:12.285:219) : pid=28138 uid=root auid=root ses=9 msg='op=PAM:setcred grantors=? acct=root exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=failed' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:30:12.285:220) : pid=1 uid=root auid=unset ses=unset msg='unit=user@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=SERVICE_STOP msg=audit(13.03.2026 17:30:12.304:221) : pid=1 uid=root auid=unset ses=unset msg='unit=user-runtime-dir@0 comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
----
type=USER_AUTH msg=audit(13.03.2026 17:30:55.140:222) : pid=28515 uid=root auid=unset ses=unset msg='op=PAM:authentication grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=USER_ACCT msg=audit(13.03.2026 17:30:55.150:223) : pid=28515 uid=root auid=unset ses=unset msg='op=PAM:accounting grantors=pam_tcb,pam_access acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:30:55.151:224) : pid=28515 uid=root auid=unset ses=unset msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=LOGIN msg=audit(13.03.2026 17:30:55.151:225) : pid=28515 uid=root old-auid=unset auid=datapk tty=(none) old-ses=4294967295 ses=10 res=yes 
----
type=PROCTITLE msg=audit(13.03.2026 17:30:55.151:225) : proctitle=sshd: datapk [priv] 
type=SYSCALL msg=audit(13.03.2026 17:30:55.151:225) : arch=x86_64 syscall=write success=yes exit=3 a0=0x5 a1=0x7ffcd50c9340 a2=0x3 a3=0x7f4bb34ae459 items=0 ppid=2800 pid=28515 auid=datapk uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=10 comm=sshd exe=/usr/sbin/sshd key=(null) 
----
type=USER_START msg=audit(13.03.2026 17:30:55.168:226) : pid=28515 uid=root auid=datapk ses=10 msg='op=PAM:session_open grantors=pam_tcb,pam_mktemp,pam_limits,pam_loginuid,pam_systemd acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=CRED_ACQ msg=audit(13.03.2026 17:30:55.168:227) : pid=28520 uid=root auid=datapk ses=10 msg='op=PAM:setcred grantors=pam_userpass,pam_tcb acct=datapk exe=/usr/sbin/sshd hostname=10.10.40.1 addr=10.10.40.1 terminal=ssh res=success' 
----
type=BPF msg=audit(13.03.2026 17:32:45.995:228) : prog-id=32 op=LOAD 
----
type=BPF msg=audit(13.03.2026 17:32:45.995:229) : prog-id=33 op=LOAD 
----
type=BPF msg=audit(13.03.2026 17:32:45.995:230) : prog-id=34 op=LOAD 
----
type=SERVICE_START msg=audit(13.03.2026 17:32:46.042:231) : pid=1 uid=root auid=unset ses=unset msg='unit=systemd-localed comm=systemd exe=/lib/systemd/systemd hostname=? addr=? terminal=? res=success' 
