Attachment 1027683 Details for Bug 1221929 – then we tested in permissive mode and here are the AVCs

then we tested in permissive mode and here are the AVCs

AVCs-in-permissive.txt (text/plain), 6.58 KB, created by Milos Malik on 2015-05-20 12:07:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Milos Malik

Created: 2015-05-20 12:07:42 UTC

Size: 6.58 KB

patch

obsolete

>----
>type=SYSCALL msg=audit(05/20/2015 11:47:32.883:2641) : arch=x86_64 syscall=chmod success=yes exit=0 a0=0x7f5a09202e40 a1=0644 a2=0x7f5a09202e60 a3=0x7d items=0 ppid=20413 pid=20439 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:47:32.883:2641) : avc:  denied  { setattr } for  pid=20439 comm=net name=serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>----
>type=SYSCALL msg=audit(05/20/2015 11:47:32.884:2642) : arch=x86_64 syscall=open success=yes exit=14 a0=0x7f5a09202e40 a1=O_RDWR a2=0x0 a3=0x1d items=0 ppid=20413 pid=20439 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:47:32.884:2642) : avc:  denied  { open } for  pid=20439 comm=net name=serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>type=AVC msg=audit(05/20/2015 11:47:32.884:2642) : avc:  denied  { read write } for  pid=20439 comm=net name=serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>----
>type=SYSCALL msg=audit(05/20/2015 11:47:32.873:2640) : arch=x86_64 syscall=connect success=yes exit=0 a0=0xb a1=0x7ffc57ab4740 a2=0x6e a3=0x0 items=0 ppid=20413 pid=20439 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:47:32.873:2640) : avc:  denied  { connectto } for  pid=20439 comm=net path=/var/run/ctdb/ctdbd.socket scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:system_r:ctdbd_t:s0 tclass=unix_stream_socket 
>----
>type=SYSCALL msg=audit(05/20/2015 11:47:32.884:2643) : arch=x86_64 syscall=fcntl success=yes exit=0 a0=0xe a1=F_SETLKW a2=0x7ffc57ab4390 a3=0xc items=0 ppid=20413 pid=20439 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:47:32.884:2643) : avc:  denied  { lock } for  pid=20439 comm=net path=/var/lib/ctdb/serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>----
>type=SYSCALL msg=audit(05/20/2015 11:47:32.884:2644) : arch=x86_64 syscall=fstat success=yes exit=0 a0=0xe a1=0x7ffc57ab4480 a2=0x7ffc57ab4480 a3=0xc items=0 ppid=20413 pid=20439 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:47:32.884:2644) : avc:  denied  { getattr } for  pid=20439 comm=net path=/var/lib/ctdb/serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>----
>type=SYSCALL msg=audit(05/20/2015 11:50:35.954:2655) : arch=x86_64 syscall=connect success=yes exit=0 a0=0xb a1=0x7ffde0614100 a2=0x6e a3=0x0 items=0 ppid=23425 pid=23451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:50:35.954:2655) : avc:  denied  { connectto } for  pid=23451 comm=net path=/var/run/ctdb/ctdbd.socket scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:system_r:ctdbd_t:s0 tclass=unix_stream_socket 
>----
>type=SYSCALL msg=audit(05/20/2015 11:50:35.957:2656) : arch=x86_64 syscall=chmod success=yes exit=0 a0=0x7f8c32e35e40 a1=0644 a2=0x7f8c32e35e60 a3=0x7d items=0 ppid=23425 pid=23451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:50:35.957:2656) : avc:  denied  { setattr } for  pid=23451 comm=net name=serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>----
>type=SYSCALL msg=audit(05/20/2015 11:50:35.957:2657) : arch=x86_64 syscall=open success=yes exit=14 a0=0x7f8c32e35e40 a1=O_RDWR a2=0x0 a3=0x1d items=0 ppid=23425 pid=23451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:50:35.957:2657) : avc:  denied  { open } for  pid=23451 comm=net name=serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>type=AVC msg=audit(05/20/2015 11:50:35.957:2657) : avc:  denied  { read write } for  pid=23451 comm=net name=serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>----
>type=SYSCALL msg=audit(05/20/2015 11:50:35.957:2658) : arch=x86_64 syscall=fcntl success=yes exit=0 a0=0xe a1=F_SETLKW a2=0x7ffde0613d50 a3=0xc items=0 ppid=23425 pid=23451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:50:35.957:2658) : avc:  denied  { lock } for  pid=23451 comm=net path=/var/lib/ctdb/serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file 
>----
>type=SYSCALL msg=audit(05/20/2015 11:50:35.957:2659) : arch=x86_64 syscall=fstat success=yes exit=0 a0=0xe a1=0x7ffde0613e40 a2=0x7ffde0613e40 a3=0xc items=0 ppid=23425 pid=23451 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=311 comm=net exe=/usr/bin/net subj=unconfined_u:system_r:samba_net_t:s0 key=(null) 
>type=AVC msg=audit(05/20/2015 11:50:35.957:2659) : avc:  denied  { getattr } for  pid=23451 comm=net path=/var/lib/ctdb/serverid.tdb.0 dev=dm-0 ino=784904 scontext=unconfined_u:system_r:samba_net_t:s0 tcontext=unconfined_u:object_r:ctdbd_var_lib_t:s0 tclass=file

Actions: View

Attachments on bug 1221929: 1026645 | 1026677 | 1026709 | 1027682 | 1027683 | 1028708