type=SYSCALL msg=audit(1723035222.338:3147): arch=c000003e syscall=313 success=yes exit=0 a0=3 a1=561fd3c2ecd2 a2=0 a3=3 items=0 ppid=1273 pid=1274 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=1 comm="insmod" exe="/usr/bin/kmod" subj=unconfined key="modules"ARCH=x86_64 SYSCALL=finit_module AUID="ubuntu" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"
type=SYSCALL msg=audit(1723035222.334:3146): arch=c000003e syscall=59 success=yes exit=0 a0=5555da9339a8 a1=5555da922d00 a2=5555da9349e0 a3=0 items=2 ppid=1273 pid=1274 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=1 comm="insmod" exe="/usr/bin/kmod" subj=unconfined key="rootcmd"ARCH=x86_64 SYSCALL=execve AUID="ubuntu" UID="root" GID="root" EUID="root" SUID="root" FSUID="root" EGID="root" SGID="root" FSGID="root"