Attachment 1455481 Details for Bug 1596563 – ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts recent

ausearch -i -m avc,user_avc,selinux_err,user_selinux_err -ts recent

ausearch.out (text/x-vhdl), 3.35 KB, created by Zdenek Pytela on 2018-06-29 09:03:12 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Zdenek Pytela

Created: 2018-06-29 09:03:12 UTC

Size: 3.35 KB

patch

obsolete

>----
>type=USER_AVC msg=audit(29.6.2018 10:46:24.852:1828) : pid=10728 uid=nscd auid=unset ses=unset subj=system_u:system_r:nscd_t:s0 msg='avc:  denied  { shmemhost } for  scontext=unconfined_u:unconfined_r:chronyc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:nscd_t:s0 tclass=nscd  exe=/usr/sbin/nscd sauid=nscd hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(29.6.2018 10:48:21.974:1829) : pid=10728 uid=nscd auid=unset ses=unset subj=system_u:system_r:nscd_t:s0 msg='avc:  denied  { gethost } for  scontext=unconfined_u:unconfined_r:chronyc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:nscd_t:s0 tclass=nscd  exe=/usr/sbin/nscd sauid=nscd hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(29.6.2018 10:52:03.976:1830) : pid=10728 uid=nscd auid=unset ses=unset subj=system_u:system_r:nscd_t:s0 msg='avc:  received policyload notice (seqno=2)  exe=/usr/sbin/nscd sauid=nscd hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(29.6.2018 10:52:03.977:1831) : pid=630 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  received policyload notice (seqno=2)  exe=/usr/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(29.6.2018 10:52:33.544:1834) : pid=10728 uid=nscd auid=unset ses=unset subj=system_u:system_r:nscd_t:s0 msg='avc:  denied  { shmemhost } for  scontext=unconfined_u:unconfined_r:chronyc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:nscd_t:s0 tclass=nscd  exe=/usr/sbin/nscd sauid=nscd hostname=? addr=? terminal=?' 
>----
>type=PROCTITLE msg=audit(29.6.2018 10:52:33.544:1835) : proctitle=chronyc tracking 
>type=SYSCALL msg=audit(29.6.2018 10:52:33.544:1835) : arch=x86_64 syscall=recvmsg success=yes exit=14 a0=0x5 a1=0x7ffe013bb260 a2=MSG_CMSG_CLOEXEC a3=0x4000 items=0 ppid=10516 pid=10772 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 ses=224 comm=chronyc exe=/usr/bin/chronyc subj=unconfined_u:unconfined_r:chronyc_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(29.6.2018 10:52:33.544:1835) : avc:  denied  { read } for  pid=10772 comm=chronyc path=/var/db/nscd/hosts dev="dm-0" ino=13114840 scontext=unconfined_u:unconfined_r:chronyc_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nscd_var_run_t:s0 tclass=file 
>----
>type=PROCTITLE msg=audit(29.6.2018 10:52:33.542:1833) : proctitle=chronyc tracking 
>type=PATH msg=audit(29.6.2018 10:52:33.542:1833) : item=0 name=/var/run/nscd/socket inode=100162 dev=00:13 mode=socket,666 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:nscd_var_run_t:s0 objtype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 
>type=CWD msg=audit(29.6.2018 10:52:33.542:1833) :  cwd=/root 
>type=SOCKADDR msg=audit(29.6.2018 10:52:33.542:1833) : saddr={ fam=local path=/var/run/nscd/socket } 
>type=SYSCALL msg=audit(29.6.2018 10:52:33.542:1833) : arch=x86_64 syscall=connect success=yes exit=0 a0=0x5 a1=0x7ffe013bb100 a2=0x6e a3=0x7ffe013bba00 items=1 ppid=10516 pid=10772 auid=root uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=pts0 ses=224 comm=chronyc exe=/usr/bin/chronyc subj=unconfined_u:unconfined_r:chronyc_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(29.6.2018 10:52:33.542:1833) : avc:  denied  { connectto } for  pid=10772 comm=chronyc path=/run/nscd/socket scontext=unconfined_u:unconfined_r:chronyc_t:s0-s0:c0.c1023 tcontext=system_u:system_r:nscd_t:s0 tclass=unix_stream_socket

Actions: View

Attachments on bug 1596563: 1455481