Attachment 1480759 Details for Bug 1625218 – The SElinux related lines from journalctl.

The SElinux related lines from journalctl.

journal_selinux.txt (text/plain), 8.31 KB, created by Lukas Ruzicka on 2018-09-04 12:16:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lukas Ruzicka

Created: 2018-09-04 12:16:33 UTC

Size: 8.31 KB

patch

obsolete

>journalctl -b | grep -i selinux
>Sep 04 13:47:14 localhost.localdomain kernel: SELinux:  Initializing.
>Sep 04 13:47:14 localhost.localdomain kernel: SELinux:  Starting in permissive mode
>Sep 04 13:47:14 localhost.localdomain kernel: SELinux:  Registering netfilter hooks
>Sep 04 13:47:14 localhost.localdomain systemd[1]: systemd 239 running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=hybrid)
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux: 32768 avtab hash slots, 116436 rules.
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux: 32768 avtab hash slots, 116436 rules.
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  8 users, 14 roles, 5154 types, 324 bools, 1 sens, 1024 cats
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  130 classes, 116436 rules
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  Class xdp_socket not defined in policy.
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux: the above unknown classes and permissions will be allowed
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  policy capability network_peer_controls=1
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  policy capability open_perms=1
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  policy capability extended_socket_class=1
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  policy capability always_check_network=0
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  policy capability cgroup_seclabel=1
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  policy capability nnp_nosuid_transition=1
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  Completing initialization.
>Sep 04 13:47:17 localhost.localdomain kernel: SELinux:  Setting up existing superblocks.
>Sep 04 13:47:17 localhost.localdomain systemd[1]: Successfully loaded SELinux policy in 433.489ms.
>Sep 04 13:47:17 localhost.localdomain systemd[1]: systemd 239 running in system mode. (+PAM +AUDIT +SELINUX +IMA -APPARMOR +SMACK +SYSVINIT +UTMP +LIBCRYPTSETUP +GCRYPT +GNUTLS +ACL +XZ +LZ4 +SECCOMP +BLKID +ELFUTILS +KMOD +IDN2 -IDN +PCRE2 default-hierarchy=hybrid)
>Sep 04 13:47:16 localhost.localdomain audit: MAC_STATUS enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1
>Sep 04 13:47:17 localhost.localdomain audit: MAC_POLICY_LOAD auid=4294967295 ses=4294967295 lsm=selinux res=1
>Sep 04 13:47:22 localhost.localdomain crond[770]: ((null)) Unauthorized SELinux context=system_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 file_context=system_u:object_r:system_cron_spool_t:s0 (/etc/crontab)
>Sep 04 13:47:23 localhost.localdomain crond[770]: ((null)) Unauthorized SELinux context=system_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 file_context=system_u:object_r:system_cron_spool_t:s0 (/etc/cron.d/raid-check)
>Sep 04 13:47:23 localhost.localdomain audit[844]: USER_START pid=844 uid=0 auid=42 ses=1 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="gdm" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>Sep 04 13:47:23 localhost.localdomain crond[770]: ((null)) Unauthorized SELinux context=system_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 file_context=system_u:object_r:system_cron_spool_t:s0 (/etc/cron.d/0hourly)
>Sep 04 13:47:25 localhost.localdomain setroubleshoot[854]: SELinux is preventing ebtables from create access on the rawip_socket labeled firewalld_t. For complete SELinux messages run: sealert -l 569000c2-08bd-48b9-8116-5fc8a515cb13
>Sep 04 13:47:25 localhost.localdomain python3[854]: SELinux is preventing ebtables from create access on the rawip_socket labeled firewalld_t.
>Sep 04 13:47:25 localhost.localdomain setroubleshoot[854]: SELinux is preventing ebtables from create access on the rawip_socket labeled firewalld_t. For complete SELinux messages run: sealert -l 569000c2-08bd-48b9-8116-5fc8a515cb13
>Sep 04 13:47:25 localhost.localdomain python3[854]: SELinux is preventing ebtables from create access on the rawip_socket labeled firewalld_t.
>Sep 04 13:47:25 localhost.localdomain setroubleshoot[854]: SELinux is preventing ebtables from create access on the rawip_socket labeled firewalld_t. For complete SELinux messages run: sealert -l 569000c2-08bd-48b9-8116-5fc8a515cb13
>Sep 04 13:47:25 localhost.localdomain python3[854]: SELinux is preventing ebtables from create access on the rawip_socket labeled firewalld_t.
>Sep 04 13:47:25 localhost.localdomain setroubleshoot[854]: SELinux is preventing ebtables from create access on the rawip_socket labeled firewalld_t. For complete SELinux messages run: sealert -l 569000c2-08bd-48b9-8116-5fc8a515cb13
>Sep 04 13:47:25 localhost.localdomain python3[854]: SELinux is preventing ebtables from create access on the rawip_socket labeled firewalld_t.
>Sep 04 13:48:09 localhost.localdomain systemd[844]: selinux: avc:  denied  { status } for auid=n/a uid=42 gid=42 cmdline="/usr/libexec/gdm-wayland-session gnome-session --autostart /usr/share/gdm/greeter/autostart" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=system permissive=0
>Sep 04 13:48:10 localhost.localdomain systemd[844]: selinux: avc:  denied  { reload } for auid=n/a uid=42 gid=42 cmdline="/usr/libexec/gnome-session-binary --autostart /usr/share/gdm/greeter/autostart" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=system permissive=0
>Sep 04 13:48:10 localhost.localdomain systemd[844]: selinux: avc:  denied  { reload } for auid=n/a uid=42 gid=42 cmdline="/usr/libexec/gnome-session-binary --autostart /usr/share/gdm/greeter/autostart" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=system permissive=0
>Sep 04 13:48:10 localhost.localdomain systemd[844]: selinux: avc:  denied  { reload } for auid=n/a uid=42 gid=42 cmdline="/usr/libexec/gnome-session-binary --autostart /usr/share/gdm/greeter/autostart" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=system permissive=0
>Sep 04 13:48:10 localhost.localdomain systemd[844]: selinux: avc:  denied  { reload } for auid=n/a uid=42 gid=42 cmdline="/usr/libexec/gnome-session-binary --autostart /usr/share/gdm/greeter/autostart" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=system permissive=0
>Sep 04 13:48:10 localhost.localdomain systemd[844]: selinux: avc:  denied  { reload } for auid=n/a uid=42 gid=42 cmdline="/usr/libexec/gnome-session-binary --autostart /usr/share/gdm/greeter/autostart" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=system permissive=0
>Sep 04 13:48:10 localhost.localdomain systemd[844]: selinux: avc:  denied  { reload } for auid=n/a uid=42 gid=42 cmdline="/usr/libexec/gnome-session-binary --autostart /usr/share/gdm/greeter/autostart" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=system permissive=0
>Sep 04 13:48:10 localhost.localdomain systemd[844]: selinux: avc:  denied  { reload } for auid=n/a uid=42 gid=42 cmdline="/usr/libexec/gnome-session-binary --autostart /usr/share/gdm/greeter/autostart" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 tclass=system permissive=0
>Sep 04 13:48:46 localhost.localdomain audit[1246]: USER_START pid=1246 uid=0 auid=1000 ses=3 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open grantors=pam_selinux,pam_selinux,pam_loginuid,pam_keyinit,pam_limits,pam_systemd,pam_unix acct="ggardener" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'
>Sep 04 13:48:46 localhost.localdomain audit[1237]: USER_START pid=1237 uid=0 auid=1000 ses=2 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open grantors=pam_selinux,pam_loginuid,pam_selinux,pam_keyinit,pam_namespace,pam_keyinit,pam_limits,pam_systemd,pam_unix,pam_gnome_keyring,pam_umask acct="ggardener" exe="/usr/libexec/gdm-session-worker" hostname=localhost.localdomain addr=? terminal=/dev/tty2 res=success'
>

Flags:

lruzicka: review+

Actions: View

Attachments on bug 1625218: 1480759