Attachment 1476589 Details for Bug 1618647 – SELinux denials

SELinux denials

file_1618647.txt (text/plain), 7.46 KB, created by voler88 on 2018-08-17 09:22:32 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: voler88

Created: 2018-08-17 09:22:32 UTC

Size: 7.46 KB

patch

obsolete

>----
>type=PROCTITLE msg=audit(20.07.2018 13:52:16.919:27) : proctitle=/usr/libexec/accounts-daemon 
>type=SYSCALL msg=audit(20.07.2018 13:52:16.919:27) : arch=x86_64 syscall=mkdir success=no exit=EACCES(ÐÑÐºÐ°Ð·Ð°Ð½Ð¾ Ð² Ð´Ð¾ÑÑÑÐ¿Ðµ) a0=0x558053ffd930 a1=0700 a2=0x0 a3=0x7fffff3435e0 items=0 ppid=1 pid=1016 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=accounts-daemon exe=/usr/libexec/accounts-daemon subj=system_u:system_r:accountsd_t:s0 key=(null) 
>type=AVC msg=audit(20.07.2018 13:52:16.919:27) : avc:  denied  { write } for  pid=1016 comm=accounts-daemon name=root dev="dm-0" ino=16797794 scontext=system_u:system_r:accountsd_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir 
>----
>type=USER_AVC msg=audit(25.07.2018 09:21:09.368:1264) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=2)  exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(25.07.2018 11:50:48.215:1346) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=3)  exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(25.07.2018 13:20:35.952:1545) : pid=1 uid=root auid=unset ses=unset subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=4)  exe=/usr/lib/systemd/systemd sauid=root hostname=? addr=? terminal=?' 
>----
>type=PROCTITLE msg=audit(26.07.2018 11:23:49.297:176) : proctitle=gdm-session-worker [pam/gdm-password] 
>type=SYSCALL msg=audit(26.07.2018 11:23:49.297:176) : arch=x86_64 syscall=mkdir success=no exit=EACCES(ÐÑÐºÐ°Ð·Ð°Ð½Ð¾ Ð² Ð´Ð¾ÑÑÑÐ¿Ðµ) a0=0x5573c5ce3080 a1=0700 a2=0x0 a3=0x7ffe92324fe0 items=0 ppid=2235 pid=2257 auid=user@ad_domain.local uid=user@ad_domain.local gid=user@ad_domain.local euid=user@ad_domain.local suid=user@ad_domain.local fsuid=user@ad_domain.local egid=user@ad_domain.local sgid=user@ad_domain.local fsgid=user@ad_domain.local tty=(none) ses=3 comm=gdm-session-wor exe=/usr/libexec/gdm-session-worker subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(26.07.2018 11:23:49.297:176) : avc:  denied  { create } for  pid=2257 comm=gdm-session-wor name=.cache scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=dir 
>----
>type=PROCTITLE msg=audit(26.07.2018 11:23:49.323:177) : proctitle=gdm-session-worker [pam/gdm-password] 
>type=SYSCALL msg=audit(26.07.2018 11:23:49.323:177) : arch=x86_64 syscall=mkdir success=no exit=EACCES(ÐÑÐºÐ°Ð·Ð°Ð½Ð¾ Ð² Ð´Ð¾ÑÑÑÐ¿Ðµ) a0=0x5573c5cf57f0 a1=0700 a2=0x5573c5cf581f a3=0x6f686b2f75722e61 items=0 ppid=2235 pid=2257 auid=user@ad_domain.local uid=user@ad_domain.local gid=user@ad_domain.local euid=user@ad_domain.local suid=user@ad_domain.local fsuid=user@ad_domain.local egid=user@ad_domain.local sgid=user@ad_domain.local fsgid=user@ad_domain.local tty=(none) ses=3 comm=gdm-session-wor exe=/usr/libexec/gdm-session-worker subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(26.07.2018 11:23:49.323:177) : avc:  denied  { create } for  pid=2257 comm=gdm-session-wor name=.cache scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=dir 
>----
>type=PROCTITLE msg=audit(31.07.2018 11:19:22.800:171) : proctitle=gdm-session-worker [pam/gdm-password] 
>type=SYSCALL msg=audit(31.07.2018 11:19:22.800:171) : arch=x86_64 syscall=mkdir success=no exit=EACCES(ÐÑÐºÐ°Ð·Ð°Ð½Ð¾ Ð² Ð´Ð¾ÑÑÑÐ¿Ðµ) a0=0x55a613d22db0 a1=0700 a2=0x55a613d22de1 a3=0x7a6f6d2f75722e61 items=0 ppid=2438 pid=2742 auid=user@ad_domain.local uid=user@ad_domain.local gid=user@ad_domain.local euid=user@ad_domain.local suid=user@ad_domain.local fsuid=user@ad_domain.local egid=user@ad_domain.local sgid=user@ad_domain.local fsgid=user@ad_domain.local tty=(none) ses=2 comm=gdm-session-wor exe=/usr/libexec/gdm-session-worker subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(31.07.2018 11:19:22.800:171) : avc:  denied  { create } for  pid=2742 comm=gdm-session-wor name=gdm scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=dir 
>----
>type=PROCTITLE msg=audit(31.07.2018 11:43:45.724:188) : proctitle=gdm-session-worker [pam/gdm-password] 
>type=SYSCALL msg=audit(31.07.2018 11:43:45.724:188) : arch=x86_64 syscall=mkdir success=no exit=EACCES(ÐÑÐºÐ°Ð·Ð°Ð½Ð¾ Ð² Ð´Ð¾ÑÑÑÐ¿Ðµ) a0=0x55c60f771c90 a1=0700 a2=0x55c60f771cc1 a3=0x7a6f6d2f75722e61 items=0 ppid=2439 pid=2497 auid=user@ad_domain.local uid=user@ad_domain.local gid=user@ad_domain.local euid=user@ad_domain.local suid=user@ad_domain.local fsuid=user@ad_domain.local egid=user@ad_domain.local sgid=user@ad_domain.local fsgid=user@ad_domain.local tty=(none) ses=3 comm=gdm-session-wor exe=/usr/libexec/gdm-session-worker subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(31.07.2018 11:43:45.724:188) : avc:  denied  { create } for  pid=2497 comm=gdm-session-wor name=gdm scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=dir 
>----
>type=PROCTITLE msg=audit(31.07.2018 11:58:41.344:236) : proctitle=/usr/bin/gnome-shell 
>type=SYSCALL msg=audit(31.07.2018 11:58:41.344:236) : arch=x86_64 syscall=read success=no exit=EACCES(ÐÑÐºÐ°Ð·Ð°Ð½Ð¾ Ð² Ð´Ð¾ÑÑÑÐ¿Ðµ) a0=0x31 a1=0x7ffcaf0b4c60 a2=0x1000 a3=0x22 items=0 ppid=5900 pid=5934 auid=unset uid=gdm gid=gdm euid=gdm suid=gdm fsuid=gdm egid=gdm sgid=gdm fsgid=gdm tty=(none) ses=unset comm=gnome-shell exe=/usr/bin/gnome-shell subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(31.07.2018 11:58:41.344:236) : avc:  denied  { getattr } for  pid=5934 comm=gnome-shell scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xserver_t:s0-s0:c0.c1023 tclass=process 
>----
>type=PROCTITLE msg=audit(31.07.2018 12:06:26.114:248) : proctitle=/usr/bin/gnome-shell 
>type=SYSCALL msg=audit(31.07.2018 12:06:26.114:248) : arch=x86_64 syscall=read success=no exit=EACCES(ÐÑÐºÐ°Ð·Ð°Ð½Ð¾ Ð² Ð´Ð¾ÑÑÑÐ¿Ðµ) a0=0x1e a1=0x7ffcaf0b4c60 a2=0x1000 a3=0x22 items=0 ppid=5900 pid=5934 auid=unset uid=gdm gid=gdm euid=gdm suid=gdm fsuid=gdm egid=gdm sgid=gdm fsgid=gdm tty=(none) ses=unset comm=gnome-shell exe=/usr/bin/gnome-shell subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(31.07.2018 12:06:26.114:248) : avc:  denied  { getattr } for  pid=5934 comm=gnome-shell scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xserver_t:s0-s0:c0.c1023 tclass=process 
>----
>type=PROCTITLE msg=audit(31.07.2018 12:09:00.377:256) : proctitle=gdm-session-worker [pam/gdm-password] 
>type=SYSCALL msg=audit(31.07.2018 12:09:00.377:256) : arch=x86_64 syscall=mkdir success=no exit=EACCES(ÐÑÐºÐ°Ð·Ð°Ð½Ð¾ Ð² Ð´Ð¾ÑÑÑÐ¿Ðµ) a0=0x55c7a2249800 a1=0700 a2=0x55c7a2249831 a3=0x7a6f6d2f75722e61 items=0 ppid=7459 pid=7497 auid=user@ad_domain.local uid=user@ad_domain.local gid=user@ad_domain.local euid=user@ad_domain.local suid=user@ad_domain.local fsuid=user@ad_domain.local egid=user@ad_domain.local sgid=user@ad_domain.local fsgid=user@ad_domain.local tty=(none) ses=5 comm=gdm-session-wor exe=/usr/libexec/gdm-session-worker subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(31.07.2018 12:09:00.377:256) : avc:  denied  { create } for  pid=7497 comm=gdm-session-wor name=gdm scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_home_t:s0 tclass=dir

Actions: View

Attachments on bug 1618647: 1476589