type=SYSCALL msg=audit(1722942252.642:3108): arch=c000003e syscall=82 success=yes exit=0 a0=55c1e509a160 a1=7ffeba23d1a0 a2=0 a3=0 items=5 ppid=951 pid=1266 auid=1000 uid=1000 gid=1000 euid=1000 suid=1000 fsuid=1000 egid=104 sgid=104 fsgid=104 tty=pts0 ses=1 comm="crontab" exe="/usr/bin/crontab" subj=unconfined key="cron"ARCH=x86_64 SYSCALL=rename AUID="ubuntu" UID="ubuntu" GID="ubuntu" EUID="ubuntu" SUID="ubuntu" FSUID="ubuntu" EGID="crontab" SGID="crontab" FSGID="crontab"
type=PATH msg=audit(1722942252.642:3108): item=0 name="crontabs/" inode=80934 dev=103:01 mode=041730 ouid=0 ogid=104 rdev=00:00 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0OUID="root" OGID="crontab"
type=PATH msg=audit(1722942252.642:3108): item=1 name="crontabs/" inode=80934 dev=103:01 mode=041730 ouid=0 ogid=104 rdev=00:00 nametype=PARENT cap_fp=0 cap_fi=0 cap_fe=0 cap_fver=0 cap_frootid=0OUID="root" OGID="crontab"