Attachment 1478865 Details for Bug 1622400 – snap-lxc-avc.log

snap-lxc-avc.log

snap-lxc.log (text/plain), 57.14 KB, created by Priit Laes on 2018-08-27 04:46:27 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Priit Laes

Created: 2018-08-27 04:46:27 UTC

Size: 57.14 KB

patch

obsolete

>auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  denied  { reload } for auid=n/a uid=0 gid=0 cmdline="" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=system permissive=1
>auid=4294967295 ses=4294967295 subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=error error_name=org.freedesktop.systemd1.NoSuchDynamicUser dest=:1.394 spid=1 tpid=1127 scontext=system_u:system_r:init_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=dbus permissive=0
>denied  { read } for  pid=4690 comm="mount" name="loop0" dev="devtmpfs" ino=25246 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>denied  { open } for  pid=4690 comm="mount" path="/dev/loop0" dev="devtmpfs" ino=25246 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>denied  { ioctl } for  pid=4690 comm="mount" path="/dev/loop0" dev="devtmpfs" ino=25246 ioctlcmd=0x4c05 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>denied  { read write } for  pid=4690 comm="mount" name="loop-control" dev="devtmpfs" ino=1353 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
>denied  { open } for  pid=4690 comm="mount" path="/dev/loop-control" dev="devtmpfs" ino=1353 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
>denied  { ioctl } for  pid=4690 comm="mount" path="/dev/loop-control" dev="devtmpfs" ino=1353 ioctlcmd=0x4c82 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:loop_control_device_t:s0 tclass=chr_file permissive=1
>denied  { write } for  pid=4690 comm="mount" name="loop1" dev="devtmpfs" ino=46506 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>denied  { mounton } for  pid=4690 comm="mount" path="/tmp/selftest-mountpoint-707170530" dev="tmpfs" ino=509030 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=4692 comm="umount" name="/" dev="loop1" ino=2 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1
>denied  { add_name } for  pid=4684 comm="snapd" name="lxd.lxc" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=4684 comm="snapd" name="lxd.lxc" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=lnk_file permissive=1
>denied  { add_name } for  pid=4684 comm="snapd" name="lxc" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=4684 comm="snapd" name="lxc" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=lnk_file permissive=1
>denied  { setpgid } for  pid=5433 comm="snapd" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=process permissive=1
>denied  { write } for  pid=5426 comm="snap" name="lxd" dev="dm-1" ino=3031958 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir permissive=1
>denied  { add_name } for  pid=5426 comm="snap" name="8415" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5426 comm="snap" name="8415" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir permissive=1
>denied  { write } for  pid=5426 comm="snap-confine" name="/" dev="tmpfs" ino=14382 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>denied  { add_name } for  pid=5426 comm="snap-confine" name="snapd" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5426 comm="snap-confine" name="snapd" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5426 comm="snap-confine" name=".lock" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { read write open } for  pid=5426 comm="snap-confine" path="/run/snapd/lock/.lock" dev="tmpfs" ino=509372 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { lock } for  pid=5426 comm="snap-confine" path="/run/snapd/lock/.lock" dev="tmpfs" ino=509372 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/run/snapd/ns" dev="tmpfs" ino=509373 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=5426 comm="snap-confine" name="/" dev="tmpfs" ino=14382 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1
>denied  { getattr } for  pid=5426 comm="snap-confine" path="/run/snapd/ns/lxd.mnt" dev="tmpfs" ino=509375 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/" dev="dm-1" ino=2 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI" dev="tmpfs" ino=509376 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI" dev="loop0" ino=12847 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/dev" dev="devtmpfs" ino=1025 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/etc" dev="dm-1" ino=786433 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/home" dev="dm-3" ino=2 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/root" dev="dm-1" ino=3014657 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:admin_home_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/proc" dev="proc" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/sys" dev="sysfs" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/var/snap" dev="dm-1" ino=2424936 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:snappy_var_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/var/lib/snapd" dev="dm-1" ino=2392182 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:snappy_var_lib_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/lib/modules" dev="dm-1" ino=1709178 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:modules_object_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/usr/src" dev="dm-1" ino=918104 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/var/log" dev="dm-1" ino=2359338 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/etc/ssl" dev="dm-1" ino=786787 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:cert_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/etc/ssl" dev="dm-1" ino=786787 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:cert_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/etc/nsswitch.conf" dev="dm-1" ino=788870 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/tmp/snap.rootfs_AvshzI/etc/nsswitch.conf" dev="loop0" ino=818 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>denied  { unmount } for  pid=5426 comm="snap-confine" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1
>denied  { unmount } for  pid=5426 comm="snap-confine" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem permissive=1
>denied  { unmount } for  pid=5426 comm="snap-confine" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>denied  { unmount } for  pid=5426 comm="snap-confine" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=filesystem permissive=1
>denied  { getattr } for  pid=5426 comm="snap-confine" path="/dev/ptmx" dev="devtmpfs" ino=1118 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:ptmx_t:s0 tclass=chr_file permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/dev/pts" dev="devpts" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=dir permissive=1
>denied  { mount } for  pid=5426 comm="snap-confine" name="/" dev="devpts" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=filesystem permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/dev/ptmx" dev="devtmpfs" ino=1118 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:ptmx_t:s0 tclass=chr_file permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/var/lib" dev="loop0" ino=12696 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1
>denied  { mount } for  pid=5426 comm="snap-confine" name="/" dev="tmpfs" ino=510916 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1
>denied  { setattr } for  pid=5426 comm="snap-confine" name="/" dev="tmpfs" ino=510916 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5426 comm="snap-confine" name="/" dev="tmpfs" ino=510916 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { write } for  pid=5426 comm="snap-confine" name="/" dev="tmpfs" ino=510916 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { add_name } for  pid=5426 comm="snap-confine" name="apparmor" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5426 comm="snap-confine" name="apparmor" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { mounton } for  pid=5426 comm="snap-confine" path="/var/lib/apparmor" dev="tmpfs" ino=510917 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { read write } for  pid=5449 comm="3" name="lxd.lock" dev="tmpfs" ino=509374 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5449 comm="3" path="/run/snapd/lock/lxd.lock" dev="tmpfs" ino=509374 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { lock } for  pid=5449 comm="3" path="/run/snapd/lock/lxd.lock" dev="tmpfs" ino=509374 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { create } for  pid=5449 comm="3" name="snap.lxd.fstab.B2S2sLkrdMYC~" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { remove_name } for  pid=5449 comm="3" name="snap.lxd.fstab.B2S2sLkrdMYC~" dev="tmpfs" ino=512085 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>denied  { rename } for  pid=5449 comm="3" name="snap.lxd.fstab.B2S2sLkrdMYC~" dev="tmpfs" ino=512085 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { mounton } for  pid=5442 comm="snap-confine" path="/run/snapd/ns/lxd.mnt" dev="tmpfs" ino=509375 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5426 comm="snap-confine" path="/run/udev/tags" dev="tmpfs" ino=1410 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:udev_var_run_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=5426 comm="snap-confine" path="/run/udev/tags" dev="tmpfs" ino=1410 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:udev_var_run_t:s0 tclass=dir permissive=1
>denied  { write } for  pid=5426 comm="snap-confine" name="/" dev="cgroup" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1
>denied  { add_name } for  pid=5426 comm="snap-confine" name="snap.lxd" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5426 comm="snap-confine" name="snap.lxd" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1
>denied  { setattr } for  pid=5426 comm="snap-confine" name="snap.lxd" dev="cgroup" ino=8 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1
>denied  { write } for  pid=5426 comm="snap-confine" name="tasks" dev="cgroup" ino=11 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1
>denied  { setgid } for  pid=5426 comm="snap-confine" capability=6  scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=capability permissive=1
>denied  { setuid } for  pid=5426 comm="snap-confine" capability=7  scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=capability permissive=1
>denied  { execute } for  pid=5426 comm="snap-confine" name="snap-exec" dev="loop0" ino=6489 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5433 comm="snap-confine" name="nsfs:" dev="nsfs" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1
>denied  { execute_no_trans } for  pid=5433 comm="snap-confine" path="/usr/lib/snapd/snap-exec" dev="loop0" ino=6489 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>denied  { map } for  pid=5426 comm="snap-exec" path="/usr/lib/snapd/snap-exec" dev="loop0" ino=6489 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>denied  { connectto } for  pid=5490 comm="snapctl" path="/run/snapd-snap.socket" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=unix_stream_socket permissive=1
>denied  { connectto } for  pid=5513 comm="snapctl" path="/run/snapd-snap.socket" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=unix_stream_socket permissive=1
>denied  { mount } for  pid=5585 comm="setup-shmounts" name="/" dev="tmpfs" ino=511622 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1
>denied  { create } for  pid=5585 comm="setup-shmounts" name="shmounts" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=1
>denied  { read write open } for  pid=5585 comm="setup-shmounts" path="/var/snap/lxd/common/ns/shmounts" dev="tmpfs" ino=511623 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=1
>denied  { mounton } for  pid=5585 comm="setup-shmounts" path="/var/snap/lxd/common/ns/shmounts" dev="tmpfs" ino=511623 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=1
>denied  { unmount } for  pid=5585 comm="setup-shmounts" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1
>denied  { rmdir } for  pid=5585 comm="setup-shmounts" name=".lxd-shmounts" dev="tmpfs" ino=509680 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>denied  { open } for  pid=5599 comm="snap-confine" path="/run/udev/tags" dev="tmpfs" ino=1410 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:udev_var_run_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=5599 comm="snap-confine" path="/run/udev/tags" dev="tmpfs" ino=1410 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:udev_var_run_t:s0 tclass=dir permissive=1
>denied  { setgid } for  pid=5599 comm="snap-confine" capability=6  scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=capability permissive=1
>denied  { setuid } for  pid=5599 comm="snap-confine" capability=7  scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=capability permissive=1
>denied  { write } for  pid=5620 comm="mount" name="/" dev="sda2" ino=2 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:boot_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=5599 comm="daemon.start" path="/var/lib/snapd/hostfs/run/NetworkManager" dev="tmpfs" ino=26431 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5623 comm="ln" name="NetworkManager" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=lnk_file permissive=1
>denied  { getattr } for  pid=5628 comm="umount" path="/run/mount/utab" dev="tmpfs" ino=511937 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=1
>denied  { setattr } for  pid=5630 comm="ldconfig.real" name="ld.so.cache~" dev="tmpfs" ino=511948 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=1
>denied  { remove_name } for  pid=5630 comm="ldconfig.real" name="ld.so.cache~" dev="tmpfs" ino=511948 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { rename } for  pid=5630 comm="ldconfig.real" name="ld.so.cache~" dev="tmpfs" ino=511948 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=1
>denied  { map } for  pid=5632 comm="mountpoint" path="/etc/ld.so.cache" dev="tmpfs" ino=511948 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=1
>denied  { mounton } for  pid=5633 comm="mount" path="/var/lib/snapd/hostfs/dev" dev="dm-1" ino=1048577 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1
>denied  { write } for  pid=5633 comm="mount" name="/" dev="devtmpfs" ino=1025 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1
>denied  { write } for  pid=5635 comm="mount" name="/" dev="proc" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1
>denied  { write } for  pid=5637 comm="mount" name="/" dev="sysfs" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=5599 comm="daemon.start" path="/var/lib/snapd/hostfs/etc/hostname" dev="dm-1" ino=788951 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:hostname_etc_t:s0 tclass=file permissive=1
>denied  { read } for  pid=5599 comm="daemon.start" name="NetworkManager" dev="tmpfs" ino=509721 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=lnk_file permissive=1
>denied  { write } for  pid=5599 comm="daemon.start" name="bash_completion.d" dev="dm-1" ino=786650 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>denied  { add_name } for  pid=5653 comm="ln" name="lxc" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5653 comm="ln" name="lxc" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=lnk_file permissive=1
>denied  { lock } for  pid=5660 comm="logrotate" path="/snap/lxd/8415/etc/logrotate.conf" dev="loop1" ino=156 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>denied  { unlink } for  pid=5660 comm="logrotate" name="logrotate.status" dev="tmpfs" ino=511996 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file permissive=1
>denied  { execute } for  pid=5662 comm="chroot" name="kmod" dev="dm-1" ino=920356 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=file permissive=1
>denied  { read open } for  pid=5662 comm="chroot" path="/usr/bin/kmod" dev="dm-1" ino=920356 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=file permissive=1
>denied  { execute_no_trans } for  pid=5662 comm="chroot" path="/usr/bin/kmod" dev="dm-1" ino=920356 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=file permissive=1
>denied  { map } for  pid=5662 comm="modinfo" path="/usr/bin/kmod" dev="dm-1" ino=920356 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=file permissive=1
>denied  { read } for  pid=5662 comm="modinfo" name="modules.softdep" dev="dm-1" ino=1708201 scontext=system_u:system_r:snappy_t:s0 tcontext=unconfined_u:object_r:modules_object_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5662 comm="modinfo" path="/usr/lib/modules/4.17.17-200.fc28.x86_64/modules.softdep" dev="dm-1" ino=1708201 scontext=system_u:system_r:snappy_t:s0 tcontext=unconfined_u:object_r:modules_object_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5662 comm="modinfo" path="/usr/lib/modules/4.17.17-200.fc28.x86_64/modules.softdep" dev="dm-1" ino=1708201 scontext=system_u:system_r:snappy_t:s0 tcontext=unconfined_u:object_r:modules_object_t:s0 tclass=file permissive=1
>denied  { sys_resource } for  pid=5669 comm="prlimit" capability=24  scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=capability permissive=1
>denied  { search } for  pid=5599 comm="daemon.start" name="fs" dev="proc" ino=14554 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=5599 comm="daemon.start" path="/proc/sys/fs/inotify/max_user_instances" dev="proc" ino=514049 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1
>denied  { read } for  pid=5672 comm="cat" name="max_user_instances" dev="proc" ino=514049 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5672 comm="cat" path="/proc/sys/fs/inotify/max_user_instances" dev="proc" ino=514049 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1
>denied  { write } for  pid=5599 comm="daemon.start" name="max_user_instances" dev="proc" ino=514049 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="/" dev="proc" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/2" dev="proc" ino=14556 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="2" dev="proc" ino=14556 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=15819 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/2/status" dev="proc" ino=15819 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1099" dev="proc" ino=16058 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1099" dev="proc" ino=16058 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=16141 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1099/status" dev="proc" ino=16141 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1127" dev="proc" ino=16278 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1127" dev="proc" ino=16278 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=19512 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1127/status" dev="proc" ino=19512 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:udev_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1287" dev="proc" ino=20190 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1287" dev="proc" ino=20190 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=24179 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1287/status" dev="proc" ino=24179 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:auditd_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1289" dev="proc" ino=24184 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:audisp_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1289" dev="proc" ino=24184 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:audisp_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=24188 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:audisp_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1289/status" dev="proc" ino=24188 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:audisp_t:s0 tclass=file permissive=1
>denied  { mount } for  pid=5683 comm="lxcfs" name="/" dev="cgroup" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=filesystem permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1314" dev="proc" ino=20346 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rtkit_daemon_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1314" dev="proc" ino=20346 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rtkit_daemon_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=27260 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rtkit_daemon_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1314/status" dev="proc" ino=27260 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rtkit_daemon_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1315" dev="proc" ino=24451 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1315" dev="proc" ino=24451 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=27650 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1315/status" dev="proc" ino=27650 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:systemd_logind_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1316" dev="proc" ino=25636 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1316" dev="proc" ino=25636 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=28126 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1316/status" dev="proc" ino=28126 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1317" dev="proc" ino=24530 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1317" dev="proc" ino=24530 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=29636 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1317/status" dev="proc" ino=29636 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:firewalld_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1318" dev="proc" ino=20465 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1318" dev="proc" ino=20465 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=28156 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1318/status" dev="proc" ino=28156 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:systemd_machined_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1319" dev="proc" ino=20467 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:modemmanager_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1319" dev="proc" ino=20467 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:modemmanager_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=26775 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:modemmanager_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1319/status" dev="proc" ino=26775 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:modemmanager_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1321" dev="proc" ino=20473 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rngd_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1321" dev="proc" ino=20473 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rngd_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=27244 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rngd_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1321/status" dev="proc" ino=27244 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rngd_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1323" dev="proc" ino=27738 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1323" dev="proc" ino=27738 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:bluetooth_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=25964 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1323/status" dev="proc" ino=25964 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:bluetooth_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1327" dev="proc" ino=23469 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:accountsd_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1327" dev="proc" ino=23469 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:accountsd_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=26308 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:accountsd_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1327/status" dev="proc" ino=26308 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:accountsd_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1328" dev="proc" ino=27917 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:mcelog_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1328" dev="proc" ino=27917 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:mcelog_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=25985 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:mcelog_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1328/status" dev="proc" ino=25985 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:mcelog_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1334" dev="proc" ino=26758 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1334" dev="proc" ino=26758 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=26765 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1334/status" dev="proc" ino=26765 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:chronyd_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1346" dev="proc" ino=25956 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:alsa_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1346" dev="proc" ino=25956 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:alsa_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=28700 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:alsa_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1346/status" dev="proc" ino=28700 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:alsa_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1347" dev="proc" ino=26946 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1347" dev="proc" ino=26946 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=28718 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1347/status" dev="proc" ino=28718 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:avahi_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1351" dev="proc" ino=28121 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1351" dev="proc" ino=28121 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=514112 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1351/status" dev="proc" ino=514112 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:gssproxy_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1389" dev="proc" ino=28178 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1389" dev="proc" ino=28178 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=28303 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1389/status" dev="proc" ino=28303 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:policykit_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1396" dev="proc" ino=28741 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:abrt_dump_oops_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1396" dev="proc" ino=28741 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:abrt_dump_oops_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=514113 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:abrt_dump_oops_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1396/status" dev="proc" ino=514113 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:abrt_dump_oops_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1435" dev="proc" ino=27535 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1435" dev="proc" ino=27535 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=28370 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1435/status" dev="proc" ino=28370 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1452" dev="proc" ino=28406 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:virtd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1452" dev="proc" ino=28406 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:virtd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=30059 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:virtd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1452/status" dev="proc" ino=30059 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:virtd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1454" dev="proc" ino=28459 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1454" dev="proc" ino=28459 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=30016 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1454/status" dev="proc" ino=30016 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1460" dev="proc" ino=28525 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1460" dev="proc" ino=28525 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=30791 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1460/status" dev="proc" ino=30791 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:crond_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1461" dev="proc" ino=28856 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1461" dev="proc" ino=28856 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=514116 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1461/status" dev="proc" ino=514116 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1656" dev="proc" ino=30531 scontext=system_u:system_r:snappy_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1656" dev="proc" ino=30531 scontext=system_u:system_r:snappy_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=32065 scontext=system_u:system_r:snappy_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1656/status" dev="proc" ino=32065 scontext=system_u:system_r:snappy_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1716" dev="proc" ino=31573 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:devicekit_power_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1716" dev="proc" ino=31573 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:devicekit_power_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=511104 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:devicekit_power_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1716/status" dev="proc" ino=511104 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:devicekit_power_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1816" dev="proc" ino=33000 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1816" dev="proc" ino=33000 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=33004 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1816/status" dev="proc" ino=33004 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1995" dev="proc" ino=33354 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:boltd_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1995" dev="proc" ino=33354 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:boltd_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=33514 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:boltd_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1995/status" dev="proc" ino=33514 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:boltd_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/1999" dev="proc" ino=32747 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="1999" dev="proc" ino=32747 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=35978 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/1999/status" dev="proc" ino=35978 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/2130" dev="proc" ino=36284 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:colord_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="2130" dev="proc" ino=36284 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:colord_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=514148 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:colord_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/2130/status" dev="proc" ino=514148 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:colord_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/2455" dev="proc" ino=41550 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:geoclue_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="2455" dev="proc" ino=41550 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:geoclue_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=51164 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:geoclue_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/2455/status" dev="proc" ino=51164 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:geoclue_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/2468" dev="proc" ino=42154 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:devicekit_disk_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="2468" dev="proc" ino=42154 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:devicekit_disk_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=42368 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:devicekit_disk_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/2468/status" dev="proc" ino=42368 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:devicekit_disk_t:s0 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/2584" dev="proc" ino=42810 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="2584" dev="proc" ino=42810 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=44156 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/2584/status" dev="proc" ino=44156 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:cupsd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/3040" dev="proc" ino=46613 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:fwupd_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="3040" dev="proc" ino=46613 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:fwupd_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=46902 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:fwupd_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/3040/status" dev="proc" ino=46902 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:fwupd_t:s0 tclass=file permissive=1
>denied  { read write } for  pid=5683 comm="lxcfs" name="fuse" dev="devtmpfs" ino=17242 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fuse_device_t:s0 tclass=chr_file permissive=1
>denied  { open } for  pid=5683 comm="lxcfs" path="/dev/fuse" dev="devtmpfs" ino=17242 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fuse_device_t:s0 tclass=chr_file permissive=1
>denied  { module_request } for  pid=5683 comm="lxcfs" kmod="char-major-10-229" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/5506" dev="proc" ino=511594 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="5506" dev="proc" ino=511594 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=514205 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/5506/status" dev="proc" ino=514205 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:setroubleshootd_t:s0-s0:c0.c1023 tclass=file permissive=1
>denied  { getattr } for  pid=5689 comm="pgrep" path="/proc/18496" dev="proc" ino=223837 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=dir permissive=1
>denied  { search } for  pid=5689 comm="pgrep" name="18496" dev="proc" ino=223837 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=dir permissive=1
>denied  { read } for  pid=5689 comm="pgrep" name="status" dev="proc" ino=223155 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=file permissive=1
>denied  { open } for  pid=5689 comm="pgrep" path="/proc/18496/status" dev="proc" ino=223155 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:dhcpc_t:s0 tclass=file permissive=1
>denied  { execute } for  pid=5691 comm="daemon.start" name="getent" dev="loop0" ino=2782 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>denied  { execute_no_trans } for  pid=5691 comm="daemon.start" path="/usr/bin/getent" dev="loop0" ino=2782 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>denied  { map } for  pid=5691 comm="getent" path="/usr/bin/getent" dev="loop0" ino=2782 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>denied  { read } for  pid=5691 comm="getent" name="nsswitch.conf" dev="tmpfs" ino=511972 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=lnk_file permissive=1
>denied  { mounton } for  pid=5683 comm="lxcfs" path="/var/snap/lxd/common/var/lib/lxcfs" dev="dm-1" ino=2424933 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:snappy_var_t:s0 tclass=dir permissive=1
>denied  { mount } for  pid=5683 comm="lxcfs" name="/" dev="fuse" ino=1 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fusefs_t:s0 tclass=filesystem permissive=1
>denied  { getattr } for  pid=5683 comm="lxcfs" path="/etc/mtab" dev="tmpfs" ino=509724 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=lnk_file permissive=1
>denied  { getattr } for  pid=5692 comm="lxd" name="/" dev="dm-1" ino=2 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1
>denied  { map } for  pid=5692 comm="lxd" path="/var/snap/lxd/common/lxd/database/global/logs.db" dev="dm-1" ino=2369537 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:snappy_var_t:s0 tclass=file permissive=1
>denied  { mounton } for  pid=5692 comm="lxd" path="/var/snap/lxd/common/lxd/shmounts" dev="tmpfs" ino=514269 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5692 comm="lxd" name="unix.socket" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:snappy_var_t:s0 tclass=sock_file permissive=1
>denied  { setattr } for  pid=5692 comm="lxd" name="unix.socket" dev="dm-1" ino=2369539 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:snappy_var_t:s0 tclass=sock_file permissive=1
>denied  { write } for  pid=5692 comm="lxd" name="/" dev="tmpfs" ino=514270 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { add_name } for  pid=5692 comm="lxd" name="sock" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir permissive=1
>denied  { create } for  pid=5692 comm="lxd" name="sock" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=sock_file permissive=1
>denied  { setattr } for  pid=5692 comm="lxd" name="sock" dev="tmpfs" ino=512558 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=sock_file permissive=1
>denied  { create } for  pid=5692 comm="lxd" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=netlink_kobject_uevent_socket permissive=1
>denied  { bind } for  pid=5692 comm="lxd" scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:system_r:snappy_t:s0 tclass=netlink_kobject_uevent_socket permissive=1
>denied  { write } for  pid=5693 comm="lxd" name="unix.socket" dev="dm-1" ino=2369539 scontext=system_u:system_r:snappy_t:s0 tcontext=system_u:object_r:snappy_var_t:s0 tclass=sock_file permissive=1

Actions: View

Attachments on bug 1622400: 1478865