Command: /usr/local/sbin/syslog-digest.py Time : 0.3058s Status : exited 0 Output : Syslog digest — 2026-07-15 04:05 EDT Processed 2,946 lines, filtered 2,509 (85%). 437 unknown (180 distinct) from 65 host(s). == abadi-computer (2 distinct, 2 total) == Jul 15 03:05:22 abadi-computer falcon-sensor-bpf[529]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:05:22 abadi-computer falcon-sensor-bpf[529]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == ai-course (2 distinct, 2 total) == Jul 15 03:16:57 ai-course falcon-sensor-bpf[663]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:16:57 ai-course falcon-sensor-bpf[663]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == b0b02.cs.umd.edu (4 distinct, 4 total) == Jul 15 03:18:55 b0b02.cs.umd.edu setroubleshoot[3184797]: SELinux is preventing /usr/bin/python3.9 from getattr access on the file /etc/authselect/nsswitch.conf. For complete SELinux messages run: sealert -l 9a1e2952-3fde-4937-a8ab-f7f59791a458 Jul 15 03:18:57 b0b02.cs.umd.edu setroubleshoot[3184797]: SELinux is preventing /usr/bin/python3.9 from read access on the file /etc/authselect/nsswitch.conf. For complete SELinux messages run: sealert -l 97d74423-e027-4cd6-8810-ad80944900b5 Jul 15 03:19:00 b0b02.cs.umd.edu setroubleshoot[3184797]: SELinux is preventing /usr/bin/python3.9 from open access on the file /etc/authselect/nsswitch.conf. For complete SELinux messages run: sealert -l 4f253f6a-62d6-46dd-8eaf-0b4d29df41c6 Jul 15 04:02:02 b0b02.cs.umd.edu rustdesk[3196565]: cannot open display: == beilstein (2 distinct, 3 total) == Jul 15 03:39:18 beilstein setroubleshoot[3968533]: SELinux is preventing rhsmcertd-worke from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 71ba0b2e-3b51-4144-87b2-5c5c25398237 Jul 15 03:39:20 beilstein setroubleshoot[3968533]: SELinux is preventing /usr/libexec/platform-python3.6 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l c740cbce-eaba-4651-9e0f-282d78396c93 [x2] == biggulp.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:28:57 biggulp.cs.umd.edu falcon-sensor-bpf[834]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:28:57 biggulp.cs.umd.edu falcon-sensor-bpf[834]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == bigtuna (2 distinct, 2 total) == Jul 15 03:06:37 bigtuna falcon-sensor-bpf[874]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:06:37 bigtuna falcon-sensor-bpf[874]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == borealis (2 distinct, 2 total) == Jul 15 03:19:44 borealis falcon-sensor-bpf[921]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:19:44 borealis falcon-sensor-bpf[921]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == borogove.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:17:37 borogove.cs.umd.edu falcon-sensor-bpf[1398]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:17:37 borogove.cs.umd.edu falcon-sensor-bpf[1398]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == cheezit.cs.umd.edu (13 distinct, 16 total) == Jul 15 03:20:10 cheezit.cs.umd.edu falcon-sensor-bpf[1347]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:20:10 cheezit.cs.umd.edu falcon-sensor-bpf[1347]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 Jul 15 03:59:47 cheezit.cs.umd.edu setroubleshoot[2354049]: failed to retrieve rpm info for path '/var/log/falconctl.log': Jul 15 03:59:48 cheezit.cs.umd.edu setroubleshoot[2354049]: SELinux is preventing /opt/CrowdStrike/falconctl18708 from append access on the file /var/log/falconctl.log. For complete SELinux messages run: sealert -l 63f66d53-fcfc-44da-a79e-c789b1ce2ce8 Jul 15 03:59:50 cheezit.cs.umd.edu setroubleshoot[2354049]: SELinux is preventing /opt/CrowdStrike/falconctl18708 from write access on the file falconstore. For complete SELinux messages run: sealert -l 386506af-597f-4357-89de-bc382f369a6e [x2] Jul 15 04:00:01 cheezit.cs.umd.edu setroubleshoot[2354049]: failed to retrieve rpm info for path '/var/lib/sss/pipes/nss': [x2] Jul 15 04:00:02 cheezit.cs.umd.edu setroubleshoot[2354049]: SELinux is preventing /usr/bin/lsof from write access on the sock_file /var/lib/sss/pipes/nss. For complete SELinux messages run: sealert -l f570494d-54d2-4dac-97e2-28395659abf1 [x2] Jul 15 04:00:02 cheezit.cs.umd.edu setroubleshoot[2354049]: SELinux is preventing /usr/bin/lsof from write access on the sock_file socket. For complete SELinux messages run: sealert -l 9ff2383b-9e1d-44ff-b8ae-af91637450ae Jul 15 04:00:42 cheezit.cs.umd.edu setroubleshoot[2355020]: SELinux is preventing /usr/bin/python3.9 from read access on the file /etc/selinux/targeted/contexts/files/file_contexts.subs_dist. For complete SELinux messages run: sealert -l 679eb260-cf5d-4783-99f4-ce308edb3295 Jul 15 04:00:42 cheezit.cs.umd.edu setroubleshoot[2355020]: SELinux is preventing /usr/bin/python3.9 from open access on the file /etc/selinux/targeted/contexts/files/file_contexts.subs_dist. For complete SELinux messages run: sealert -l 77caba8a-5cd0-4e18-b188-6e35c461772d Jul 15 04:00:42 cheezit.cs.umd.edu setroubleshoot[2355020]: SELinux is preventing /usr/bin/python3.9 from read access on the file /etc/selinux/targeted/contexts/files/file_contexts.subs. For complete SELinux messages run: sealert -l d9c6dd0d-0a34-4430-a5ff-e985c55cb064 Jul 15 04:00:42 cheezit.cs.umd.edu setroubleshoot[2355020]: SELinux is preventing /usr/bin/python3.9 from open access on the file /etc/selinux/targeted/contexts/files/file_contexts.subs. For complete SELinux messages run: sealert -l 8edbce57-8212-4ac8-af50-3fe403231eda Jul 15 04:00:42 cheezit.cs.umd.edu setroubleshoot[2355020]: SELinux is preventing /usr/bin/python3.9 from map access on the file /etc/selinux/targeted/contexts/files/file_contexts.bin. For complete SELinux messages run: sealert -l 4a0cbe3b-6f49-4c7e-95c6-380f7aef806e == contest (1 distinct, 33 total) == Jul 15 03:06:34 contest goferd[994]: [ERROR][worker-0] gofer.messaging.adapter.connect:33 - connect: proton+amqps://satellite8.cs.umd.edu:5647, failed: Connection amqps://satellite8.cs.umd.edu:5647 disconnected: Condition('proton.pythonio', 'Connection refused to all addresses') [x33] == csfw00a (2 distinct, 145 total) == Jul 15 03:04:55 csfw00a kernel: bnxt_en 0000:09:00.0 eth3: NIC Link is Down [x141] Jul 15 03:24:58 csfw00a ospf6d[1477]: [EC 100663307] Could not send entire message [x4] == cskayako (2 distinct, 2 total) == Jul 15 03:20:09 cskayako falcon-sensor-bpf[735]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:20:09 cskayako falcon-sensor-bpf[735]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == defer (2 distinct, 2 total) == Jul 15 03:08:18 defer falcon-sensor-bpf[802]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:08:18 defer falcon-sensor-bpf[802]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == dhcp00a.cs.umd.edu (5 distinct, 5 total) == Jul 15 03:59:57 dhcp00a.cs.umd.edu setroubleshoot[1195502]: failed to retrieve rpm info for path '/etc/insights-client/machine-id': Jul 15 03:59:58 dhcp00a.cs.umd.edu setroubleshoot[1195502]: SELinux is preventing /usr/bin/python3.9 from read access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l de64b58d-150c-4999-bfa3-4ce72ca0016c Jul 15 03:59:58 dhcp00a.cs.umd.edu setroubleshoot[1195502]: SELinux is preventing /usr/bin/python3.9 from open access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 57f419b0-bf41-4682-8bd5-3c792dcf238c Jul 15 03:59:58 dhcp00a.cs.umd.edu setroubleshoot[1195502]: SELinux is preventing /usr/bin/python3.9 from getattr access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 8c39c249-3171-4c9a-a6ab-39e8fc5a8051 Jul 15 03:59:58 dhcp00a.cs.umd.edu setroubleshoot[1195502]: SELinux is preventing /usr/bin/python3.9 from ioctl access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l f2ca7c20-5dbd-4625-8bfb-091411f3d3cb == dojo (2 distinct, 2 total) == Jul 15 03:06:11 dojo falcon-sensor-bpf[2202]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:06:11 dojo falcon-sensor-bpf[2202]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == emaar (2 distinct, 2 total) == Jul 15 03:31:20 emaar falcon-sensor-bpf[971]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:31:20 emaar falcon-sensor-bpf[971]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == florence-ruohan (3 distinct, 4 total) == Jul 15 03:08:57 florence-ruohan falcon-sensor-bpf[852]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:08:57 florence-ruohan falcon-sensor-bpf[852]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 Jul 15 03:45:50 florence-ruohan journal[6293]: secret_password_lookup_sync() returned NULL [x2] == frabjous (2 distinct, 2 total) == Jul 15 03:18:34 frabjous falcon-sensor-bpf[1357]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:18:34 frabjous falcon-sensor-bpf[1357]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == frozone (2 distinct, 2 total) == Jul 15 03:08:09 frozone falcon-sensor-bpf[1050]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:08:09 frozone falcon-sensor-bpf[1050]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == galahad.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:05:47 galahad.cs.umd.edu falcon-sensor-bpf[970]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:05:47 galahad.cs.umd.edu falcon-sensor-bpf[970]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == gle-dind00.cs.umd.edu (1 distinct, 1 total) == Jul 15 03:05:09 gle-dind00.cs.umd.edu setroubleshoot[3159115]: SELinux is preventing /usr/libexec/platform-python3.6 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 7ff736ad-bb2c-4d1e-a307-bc420c5f306f == gle-omnibus00.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:27:33 gle-omnibus00.cs.umd.edu falcon-sensor-bpf[974]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:27:33 gle-omnibus00.cs.umd.edu falcon-sensor-bpf[974]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == hackerman (2 distinct, 2 total) == Jul 15 03:17:59 hackerman falcon-sensor-bpf[896]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:17:59 hackerman falcon-sensor-bpf[896]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == haproxy02.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:26:42 haproxy02.cs.umd.edu falcon-sensor-bpf[990]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:26:42 haproxy02.cs.umd.edu falcon-sensor-bpf[990]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == haproxy03.cs.umd.edu (5 distinct, 5 total) == Jul 15 03:14:18 haproxy03.cs.umd.edu setroubleshoot[3666025]: failed to retrieve rpm info for path '/etc/insights-client/machine-id': Jul 15 03:14:19 haproxy03.cs.umd.edu setroubleshoot[3666025]: SELinux is preventing /usr/bin/python3.9 from read access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l ea23d460-dd15-4fbe-8239-788bcfc94f01 Jul 15 03:14:19 haproxy03.cs.umd.edu setroubleshoot[3666025]: SELinux is preventing /usr/bin/python3.9 from open access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 8e63e09f-12ef-45e2-8b4a-f59c70a08732 Jul 15 03:14:19 haproxy03.cs.umd.edu setroubleshoot[3666025]: SELinux is preventing /usr/bin/python3.9 from getattr access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l a9207548-ca2f-4559-8e72-dc85af266dbc Jul 15 03:14:19 haproxy03.cs.umd.edu setroubleshoot[3666025]: SELinux is preventing /usr/bin/python3.9 from ioctl access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 0db9fd9e-0c23-4c17-a68b-31186962fd80 == hasaraumd (2 distinct, 2 total) == Jul 15 03:25:00 hasaraumd falcon-sensor-bpf[730]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:25:00 hasaraumd falcon-sensor-bpf[730]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == hazfs.cs.umd.edu (2 distinct, 4 total) == Jul 15 03:41:22 hazfs.cs.umd.edu zrepl[2444237]: [hourlies_push][pruning][vUfd$LDmZ$LDmZ.WVPf.mVj+.e3zQ]: target could not destroy snapshots prune_side="receiver" err="destroys failed @zrepl_20260715_073957_000: dataset is busy" [x2] Jul 15 03:41:24 hazfs.cs.umd.edu zrepl[2444237]: [hourlies_push][pruning][vUfd$LDmZ$LDmZ.WVPf.mVj+.e3zQ]: target could not destroy snapshots prune_side="receiver" err="destroys failed @zrepl_20260715_073958_000: dataset is busy" [x2] == hspc (2 distinct, 2 total) == Jul 15 03:21:21 hspc falcon-sensor-bpf[1008]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:21:21 hspc falcon-sensor-bpf[1008]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == idm00 (1 distinct, 1 total) == Jul 15 03:50:55 idm00 named[1455]: client @0x7f330c465cd8 10.73.240.42#63318: update '73.10.in-addr.arpa/IN' denied == idmp0 (1 distinct, 1 total) == Jul 15 03:34:59 idmp0 named[5198]: client @0x7f9910042b08 10.73.240.43#53169: update '73.10.in-addr.arpa/IN' denied == inbound00.cs.umd.edu (2 distinct, 3 total) == Jul 15 03:33:01 inbound00.cs.umd.edu krb5_child[153467]: Preauthentication failed Jul 15 03:56:46 inbound00.cs.umd.edu krb5_child[158955]: Client 'admin@UMD.EDU' not found in Kerberos database [x2] == itmon02 (2 distinct, 41 total) == Jul 15 03:08:04 itmon02 sshd[1904]: error: beginning MaxStartups throttling [x40] Jul 15 03:15:03 itmon02 (httpd)[3247807]: httpd.service: Referenced but unset environment variable evaluates to an empty string: OPTIONS == jaws.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:29:40 jaws.cs.umd.edu falcon-sensor-bpf[1186]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:29:40 jaws.cs.umd.edu falcon-sensor-bpf[1186]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == kadath.cs.umd.edu (1 distinct, 1 total) == Jul 15 03:47:30 kadath.cs.umd.edu puppet-agent[1191458]: (Facter) invalid or malformed lldp data: MalformedDataError: no lldp interface data found == krispykreme.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:24:05 krispykreme.cs.umd.edu falcon-sensor-bpf[1296]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:24:05 krispykreme.cs.umd.edu falcon-sensor-bpf[1296]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == mashie (2 distinct, 2 total) == Jul 15 03:11:09 mashie falcon-sensor-bpf[786]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:11:09 mashie falcon-sensor-bpf[786]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == neoavion (1 distinct, 1 total) == Jul 15 03:34:22 neoavion krb5_child[3822406]: No credentials cache found == neodontcare.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:06:36 neodontcare.cs.umd.edu falcon-sensor-bpf[949]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:06:36 neodontcare.cs.umd.edu falcon-sensor-bpf[949]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == neograd (2 distinct, 2 total) == Jul 15 03:26:00 neograd falcon-sensor-bpf[695]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:26:00 neograd falcon-sensor-bpf[695]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == netbox (1 distinct, 1 total) == Jul 15 03:08:02 netbox (httpd)[2931649]: httpd.service: Referenced but unset environment variable evaluates to an empty string: OPTIONS == netman.cs.umd.edu (9 distinct, 16 total) == Jul 15 03:17:48 netman.cs.umd.edu falcon-sensor-bpf[1129]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:17:48 netman.cs.umd.edu falcon-sensor-bpf[1129]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 Jul 15 03:23:23 netman.cs.umd.edu krb5_child[289282]: Client 'admin@UMD.EDU' not found in Kerberos database [x4] Jul 15 03:23:28 netman.cs.umd.edu sshd[289246]: error: PAM: Authentication failure for admin from 119.152.54.111 Jul 15 03:55:15 netman.cs.umd.edu setroubleshoot[297891]: SELinux is preventing /usr/bin/gpg from read access on the file gpg.conf. For complete SELinux messages run: sealert -l 019ad1da-a874-4814-8037-3b3e5f413ad2 [x2] Jul 15 03:55:16 netman.cs.umd.edu setroubleshoot[297891]: SELinux is preventing /usr/bin/gpg from open access on the file /root/.gnupg/gpg.conf. For complete SELinux messages run: sealert -l cb54177e-d44c-46a1-b246-5c0bbb8343be [x2] Jul 15 03:55:16 netman.cs.umd.edu setroubleshoot[297891]: SELinux is preventing /usr/bin/gpg from getattr access on the file /root/.gnupg/gpg.conf. For complete SELinux messages run: sealert -l fbba2e30-b7ab-491c-9ec6-f553e9ef72af [x2] Jul 15 03:55:26 netman.cs.umd.edu setroubleshoot[297891]: SELinux is preventing rhsmcertd-worke from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 6795983f-2364-41d4-b013-b7373eb64b54 Jul 15 03:55:42 netman.cs.umd.edu setroubleshoot[298732]: SELinux is preventing /usr/libexec/platform-python3.6 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l eaea2564-5997-4041-8a2a-9d57643a7a88 [x2] == networkvm00.cs.umd.edu (2 distinct, 3 total) == Jul 15 03:10:02 networkvm00.cs.umd.edu setroubleshoot[1430948]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l c697d51c-2877-490f-ac01-dcf2d6e595c6 [x2] Jul 15 03:10:02 networkvm00.cs.umd.edu setroubleshoot[1430948]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 4200d36d-62d2-4a83-98a3-3fac59afaf5a == networkvm01.cs.umd.edu (9 distinct, 9 total) == Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from write access on the directory /(null). For complete SELinux messages run: sealert -l 8ead1354-ae8a-4a17-bb3f-146ebf6c892c Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from add_name access on the directory /(null). For complete SELinux messages run: sealert -l f9b51e91-5dbc-455f-88c2-f0746a2f0f4c Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from create access on the file /(null). For complete SELinux messages run: sealert -l af0a60e6-c449-4bdd-bfb8-c69b58472884 Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from link access on the file /(null). For complete SELinux messages run: sealert -l 3df452f6-4d9e-4e38-946b-ea8e1edd356c Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from remove_name access on the directory .#lk0x000055c9b3dabed0.networkvm01.cs.umd.edu.1023351x. For complete SELinux messages run: sealert -l fcac71c9-c7c0-45a9-9dc2-a8dcbeccfc75 Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from unlink access on the file .#lk0x000055c9b3dabed0.networkvm01.cs.umd.edu.1023351x. For complete SELinux messages run: sealert -l a672ebb7-fa69-419c-b1f0-fb386b8b48a6 Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from write access on the directory /(null). For complete SELinux messages run: sealert -l fec9104e-d27a-4fd4-9872-6b17088c2951 Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from add_name access on the directory /(null). For complete SELinux messages run: sealert -l 26718b2a-493d-457d-818c-244bd8d4ec9d Jul 15 03:47:21 networkvm01.cs.umd.edu setroubleshoot[1023352]: SELinux is preventing /usr/bin/gpg from remove_name access on the directory .#lk0x000055a7dbb1cee0.networkvm01.cs.umd.edu.1023369x. For complete SELinux messages run: sealert -l 80e6efe4-93f3-4219-8132-b2b52db1f517 == nightingale (2 distinct, 2 total) == Jul 15 03:26:35 nightingale falcon-sensor-bpf[909]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:26:35 nightingale falcon-sensor-bpf[909]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == orchids (2 distinct, 2 total) == Jul 15 03:26:33 orchids falcon-sensor-bpf[1103]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:26:33 orchids falcon-sensor-bpf[1103]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == outbound00.cs.umd.edu (3 distinct, 10 total) == Jul 15 03:09:09 outbound00.cs.umd.edu python3[148001]: ldapdb [x7] Jul 15 03:24:45 outbound00.cs.umd.edu systemd[1]: Configuration file /usr/lib/systemd/system/authentication_milter.service is marked executable. Please remove executable permission bits. Proceeding anyway. Jul 15 04:03:40 outbound00.cs.umd.edu cockpit-ws[161499]: /usr/share/cockpit/static/login.js/favicon.ico: Failed to open file “/usr/share/cockpit/static/login.js/favicon.ico”: open() failed: Not a directory [x2] == outbound01.cs.umd.edu (2 distinct, 9 total) == Jul 15 03:13:10 outbound01.cs.umd.edu python3[3519479]: ldapdb [x6] Jul 15 04:03:38 outbound01.cs.umd.edu cockpit-ws[3531559]: /usr/share/cockpit/static/login.js/favicon.ico: Failed to open file “/usr/share/cockpit/static/login.js/favicon.ico”: open() failed: Not a directory [x3] == peach.cs.umd.edu (5 distinct, 7 total) == Jul 15 03:32:08 peach.cs.umd.edu setroubleshoot[2847345]: SELinux is preventing /usr/bin/qemu-ga from search access on the directory /var/lib/containers/storage/overlay. For complete SELinux messages run: sealert -l ba415951-a2c6-424e-b17d-305c5300b9f3 [x2] Jul 15 03:32:08 peach.cs.umd.edu setroubleshoot[2847345]: SELinux is preventing /usr/bin/qemu-ga from search access on the directory /var/lib/containers/storage/overlay. For complete SELinux messages run: sealert -l 6aeb0956-fcf2-462a-ae4d-439b912c16d0 [x2] Jul 15 03:35:32 peach.cs.umd.edu systemd[1]: splunk.service: Stopping timed out. Terminating. Jul 15 03:35:32 peach.cs.umd.edu systemd[1]: splunk.service: Control process exited, code=killed, status=15/TERM Jul 15 03:35:38 peach.cs.umd.edu setroubleshoot[2848104]: SELinux is preventing systemd from unlink access on the file splunkd.pid. For complete SELinux messages run: sealert -l ad9baf89-a69c-41a4-9dc1-608047e050d5 == sign-csi1120a (2 distinct, 2 total) == Jul 15 03:35:44 sign-csi1120a setroubleshoot[2427664]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 76a4be74-ba22-43ad-9087-a37f4ad69fdd Jul 15 03:35:44 sign-csi1120a setroubleshoot[2427664]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 85767a89-287d-4515-a10f-2436af4cee8c == sign-irb2166 (2 distinct, 3 total) == Jul 15 03:29:26 sign-irb2166 setroubleshoot[1018056]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l c68ab875-0f50-4a6c-b1af-c4688d693b51 [x2] Jul 15 03:29:26 sign-irb2166 setroubleshoot[1018056]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 03ea7862-a12b-49f5-bd21-a0ac9dbc1818 == sign-irb2208 (2 distinct, 2 total) == Jul 15 04:04:49 sign-irb2208 setroubleshoot[1020339]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 805778b1-4b01-4d9e-852a-36ce268519b9 Jul 15 04:04:49 sign-irb2208 setroubleshoot[1020339]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 48d0e076-00e2-4d6b-864d-0203bf0af432 == sign-irb5166 (2 distinct, 3 total) == Jul 15 03:25:56 sign-irb5166 setroubleshoot[1018369]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l ac677ec5-cf0e-4a3f-b8e5-65f30cc1abee [x2] Jul 15 03:25:56 sign-irb5166 setroubleshoot[1018369]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 580fe684-cceb-4ac3-a615-117a3a573c4a == sign-irb5208 (2 distinct, 2 total) == Jul 15 03:41:06 sign-irb5208 setroubleshoot[1018980]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l ff7dcb8f-96cd-40ef-862f-ea57284d64b2 Jul 15 03:41:06 sign-irb5208 setroubleshoot[1018980]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 03373771-9bdc-4bba-aa63-b1a04491ecdd == soul (3 distinct, 3 total) == Jul 15 03:12:01 soul krb5_child[3766369]: Client 'admin@UMD.EDU' not found in Kerberos database Jul 15 03:58:52 soul setroubleshoot[3772252]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 1a7ccdf8-964c-4257-819a-c0ac425c9236 Jul 15 03:58:52 soul setroubleshoot[3772252]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l ba458e48-a5fa-4944-bbcc-f7ef4aabdfad == starkweather2.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:05:59 starkweather2.cs.umd.edu setroubleshoot[1465713]: SELinux is preventing /usr/libexec/platform-python3.6 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 855499ff-ad3a-48bc-bc68-b23a79fa00c5 Jul 15 03:05:59 starkweather2.cs.umd.edu setroubleshoot[1465713]: SELinux is preventing /usr/libexec/platform-python3.6 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l 89143eb3-48b6-4def-a3d9-8a76b964000a == stomach (7 distinct, 8 total) == Jul 15 03:12:32 stomach setroubleshoot[112447]: SELinux is preventing /usr/bin/python3.9 from read access on the file machine-id. For complete SELinux messages run: sealert -l b410293e-d248-48dc-af1b-340ec5e9d4ed Jul 15 03:12:32 stomach setroubleshoot[112447]: failed to retrieve rpm info for path '/etc/insights-client/machine-id': Jul 15 03:12:32 stomach setroubleshoot[112447]: SELinux is preventing /usr/bin/python3.9 from open access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 4dad6993-ab74-4225-8b28-a130d217f17a Jul 15 03:12:32 stomach setroubleshoot[112447]: SELinux is preventing /usr/bin/python3.9 from getattr access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 415b5c56-81ed-4461-8ab9-33d172b0a25c Jul 15 03:12:32 stomach setroubleshoot[112447]: SELinux is preventing /usr/bin/python3.9 from ioctl access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 48f2025c-a0d2-41f6-ab3f-33699557d688 Jul 15 03:12:32 stomach setroubleshoot[112447]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 76a77cc2-51d1-48e4-be72-3513f3858c3c [x2] Jul 15 03:12:32 stomach setroubleshoot[112447]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l cd2f31b2-5beb-44ff-bca5-8d751d475ad0 == strawberry (4 distinct, 10 total) == Jul 15 03:09:44 strawberry udisksd[1067]: Error performing housekeeping for drive /org/freedesktop/UDisks2/drives/ST2000DM001_1CH164_W1E8J5KJ: Error updating SMART data: Error sending ATA command CHECK POWER MODE: Unexpected sense data returned:#0120000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................#0120010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................#012 (g-io-error-quark, 0) [x6] Jul 15 03:15:17 strawberry falcon-sensor-bpf[808]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:15:17 strawberry falcon-sensor-bpf[808]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 Jul 15 03:34:42 strawberry smartd[5314]: Device: /dev/sda [SAT], failed to read SMART Attribute Data [x2] == submit26-b9-2 (1 distinct, 3 total) == Jul 15 03:18:00 submit26-b9-2 systemd[1]: user@1001.service: Main process exited, code=killed, status=9/KILL [x3] == teaching-awards (9 distinct, 9 total) == Jul 15 03:07:12 teaching-awards falcon-sensor-bpf[782]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:07:12 teaching-awards falcon-sensor-bpf[782]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 Jul 15 03:38:18 teaching-awards setroubleshoot[488806]: failed to retrieve rpm info for path '/etc/insights-client/machine-id': Jul 15 03:38:19 teaching-awards setroubleshoot[488806]: SELinux is preventing /usr/bin/python3.9 from read access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 0bb86494-585b-41c2-a526-8abd63ec96d5 Jul 15 03:38:19 teaching-awards setroubleshoot[488806]: SELinux is preventing /usr/bin/python3.9 from open access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 29a654c1-636a-460c-a8c6-ef732c76b5df Jul 15 03:38:19 teaching-awards setroubleshoot[488806]: SELinux is preventing /usr/bin/python3.9 from getattr access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 38fc3a2d-ac96-4c48-8e0d-2b107392a084 Jul 15 03:38:19 teaching-awards setroubleshoot[488806]: SELinux is preventing /usr/bin/python3.9 from ioctl access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l bd311f4d-902f-4193-81c2-69b184d7730a Jul 15 03:38:19 teaching-awards setroubleshoot[488806]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l c5fb43ea-e720-473d-a242-2643bf3c3936 Jul 15 03:38:19 teaching-awards setroubleshoot[488806]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l cc27d718-c92a-4e2b-8b9f-87b3363f0994 == tulgey.cs.umd.edu (2 distinct, 2 total) == Jul 15 03:27:30 tulgey.cs.umd.edu falcon-sensor-bpf[1526]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:27:30 tulgey.cs.umd.edu falcon-sensor-bpf[1526]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == tumtum.cs.umd.edu (7 distinct, 7 total) == Jul 15 03:24:58 tumtum.cs.umd.edu setroubleshoot[575261]: failed to retrieve rpm info for path '/etc/insights-client/machine-id': Jul 15 03:24:59 tumtum.cs.umd.edu setroubleshoot[575261]: SELinux is preventing /usr/bin/python3.9 from read access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 778b4264-bf8c-4f97-9733-5b11c812c7b2 Jul 15 03:24:59 tumtum.cs.umd.edu setroubleshoot[575261]: SELinux is preventing /usr/bin/python3.9 from open access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 643070cc-66ac-40d9-8359-61dae01111ac Jul 15 03:24:59 tumtum.cs.umd.edu setroubleshoot[575261]: SELinux is preventing /usr/bin/python3.9 from getattr access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l a8e7637b-2bbf-4865-878c-7368a3fd2103 Jul 15 03:24:59 tumtum.cs.umd.edu setroubleshoot[575261]: SELinux is preventing /usr/bin/python3.9 from ioctl access on the file /etc/insights-client/machine-id. For complete SELinux messages run: sealert -l 4f96f449-648a-4429-abef-d98fa74f5d54 Jul 15 03:27:49 tumtum.cs.umd.edu falcon-sensor-bpf[1362]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:27:49 tumtum.cs.umd.edu falcon-sensor-bpf[1362]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == vault (2 distinct, 2 total) == Jul 15 03:26:09 vault setroubleshoot[3004477]: SELinux is preventing /usr/bin/python3.9 from unlink access on the file repomd.xml. For complete SELinux messages run: sealert -l 5481bc7e-06d1-4136-b795-4c3d0a112498 Jul 15 03:26:09 vault setroubleshoot[3004477]: SELinux is preventing /usr/bin/python3.9 from rmdir access on the directory repodata. For complete SELinux messages run: sealert -l f5abecff-a3ab-411b-ae19-9c1b367ecde4 == wraith (2 distinct, 2 total) == Jul 15 03:09:26 wraith falcon-sensor-bpf[913]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:09:26 wraith falcon-sensor-bpf[913]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == yogurt (2 distinct, 2 total) == Jul 15 03:17:37 yogurt falcon-sensor-bpf[950]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:17:37 yogurt falcon-sensor-bpf[950]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225 == zwicker-computer (2 distinct, 2 total) == Jul 15 03:23:30 zwicker-computer falcon-sensor-bpf[718]: CrowdStrike(4): Could not retrieve DisableProxy value: c0000225 Jul 15 03:23:30 zwicker-computer falcon-sensor-bpf[718]: CrowdStrike(4): ConnectWithProxy: Unable to get application proxy host from CsConfig: c0000225