окт 28 10:55:15 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain pkexec[4783]: test: Error executing command as another user: Not authorized [USER=root] [TTY=unknown] [CWD=/home/test] [COMMAND=/bin/sh -c cat /etc/audit/auditd.conf > /tmp/altcenter_auditd.conf && chmod 644 /tmp/altcenter_auditd.conf && cat /etc/audit/rules.d/*.rules > /tmp/altcenter_audit.rules 2>/dev/null || : && chmod 644 /tmp/altcenter_audit.rules 2>/dev/null || : && cat /etc/login.defs > /tmp/altcenter_login.defs 2>/dev/null || : && chmod 644 /tmp/altcenter_login.defs 2>/dev/null || : && cat /etc/openssh/sshd_config > /tmp/altcenter_sshd_config 2>/dev/null || : && chmod 644 /tmp/altcenter_sshd_config 2>/dev/null || : && (sysctl -a 2>/dev/null | grep '^kernel\.altha\.' > /tmp/altcenter_altha_sysctl || :) && chmod 644 /tmp/altcenter_altha_sysctl && /usr/bin/python3 /usr/share/altcenter/res/fstec_check.py]
окт 28 10:55:28 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain polkitd[967]: Operator of unix-session:4 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.freedesktop.policykit.exec for unix-process:3952:523824 [/usr/bin/python3 /usr/bin/altcenter] (owned by unix-user:test)
окт 28 10:55:29 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain pkexec[4758]: test: Executing command [USER=root] [TTY=unknown] [CWD=/home/test] [COMMAND=/bin/sh -c cat /etc/audit/auditd.conf > /tmp/altcenter_auditd.conf && chmod 644 /tmp/altcenter_auditd.conf && cat /etc/audit/rules.d/*.rules > /tmp/altcenter_audit.rules 2>/dev/null || : && chmod 644 /tmp/altcenter_audit.rules 2>/dev/null || : && cat /etc/login.defs > /tmp/altcenter_login.defs 2>/dev/null || : && chmod 644 /tmp/altcenter_login.defs 2>/dev/null || : && cat /etc/openssh/sshd_config > /tmp/altcenter_sshd_config 2>/dev/null || : && chmod 644 /tmp/altcenter_sshd_config 2>/dev/null || : && (sysctl -a 2>/dev/null | grep '^kernel\.altha\.' > /tmp/altcenter_altha_sysctl || :) && chmod 644 /tmp/altcenter_altha_sysctl && /usr/bin/python3 /usr/share/altcenter/res/fstec_check.py]
окт 28 10:55:47 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain polkitd[967]: Operator of unix-session:4 successfully authenticated as unix-user:root to gain ONE-SHOT authorization for action org.freedesktop.policykit.exec for unix-process:3952:523824 [/usr/bin/python3 /usr/bin/altcenter] (owned by unix-user:test)
окт 28 10:55:47 kworkstation-11-4-x86-64-legacy-ext4-20261023.localdomain pkexec[4869]: test: Executing command [USER=root] [TTY=unknown] [CWD=/home/test] [COMMAND=/usr/bin/sh -c conf=$(test -f /etc/openssh/sshd_config && echo /etc/openssh/sshd_config || echo /etc/ssh/sshd_config); cp -a "$conf" "$conf.altcenter.bak"; sed -i -E '/^[[:space:]]*#?[[:space:]]*PermitRootLogin([[:space:]]+|$)/Id' "$conf"; echo 'PermitRootLogin without-password' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*PubkeyAuthentication([[:space:]]+|$)/Id' "$conf"; echo 'PubkeyAuthentication yes' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*PermitEmptyPasswords([[:space:]]+|$)/Id' "$conf"; echo 'PermitEmptyPasswords no' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*HostbasedAuthentication([[:space:]]+|$)/Id' "$conf"; echo 'HostbasedAuthentication no' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*IgnoreRhosts([[:space:]]+|$)/Id' "$conf"; echo 'IgnoreRhosts yes' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*Protocol([[:space:]]+|$)/Id' "$conf"; echo 'Protocol 2' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*AllowUsers([[:space:]]+|$)/Id' "$conf"; echo 'AllowUsers global_user testuser2' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*AllowGroups([[:space:]]+|$)/Id' "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*Port([[:space:]]+|$)/Id' "$conf"; echo 'Port 22' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*ClientAliveInterval([[:space:]]+|$)/Id' "$conf"; echo 'ClientAliveInterval 0' >> "$conf"; sed -i -E '/^[[:space:]]*#?[[:space:]]*ClientAliveCountMax([[:space:]]+|$)/Id' "$conf"; echo 'ClientAliveCountMax 3' >> "$conf"; chown root:root "$conf"; chmod 644 "$conf"; if ! sshd -t -f "$conf"; then cp -a "$conf.altcenter.bak" "$conf"; exit 1; fi; cp "$conf" /tmp/altcenter_sshd_config && chmod 644 /tmp/altcenter_sshd_config && (systemctl reload sshd || systemctl reload ssh || systemctl restart sshd || systemctl restart ssh)]