Attachment 148176 Details for Bug 222498 – Feb FC7T1 install and updates - final avc status.

Feb FC7T1 install and updates - final avc status.

feb15avcaudits.txt (text/plain), 8.58 KB, created by Darwin H. Webb on 2007-02-16 08:11:41 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Darwin H. Webb

Created: 2007-02-16 08:11:41 UTC

Size: 8.58 KB

patch

obsolete

>#setroubleshoot-1.8.18-1.fc7
>#selinux-policy-2.5.3-2.fc7
>#
>#  From a recent install of FC7T1 dvd and 3 or 4 days of updates (Feb 13-15th)
>#  For fisrt 2 days I could not get FC to come up past audit messages of dbus and setrouleshoot and there was some bluetooth but I  have that off now. Seems that there was also some shard lib avc's but se updates must have fixed those.
>#
># So I had to run with selinux on kernel line. autorelabel would not run? Finally e-mail from root indicated cron for makewhatis failed. This must have run again since dur to the last updates. So I touch /.autorelabel and restarted will selinux=1 on kernel line.
># (This 25 not 30, 30 bombed right away.)
># The relabel started this time and many items where relabled > 200.
># System come up and this is the audit.log from the beginning pf boot time. Several avc errors that need attention..
># thank you DHW
>
>
>
>type=DAEMON_END msg=audit(1171611426.655:9147) auditd normal halt, sending auid=4294967295 pid=3399 subj= res=success, auditd pid=1894
>type=DAEMON_START msg=audit(1171611629.549:9187) auditd start, ver=1.4, format=raw, auid=4294967295 pid=2016 res=success, auditd pid=2016
>type=CONFIG_CHANGE msg=audit(1171611629.648:7): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0
>type=CONFIG_CHANGE msg=audit(1171611629.838:8): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0
>type=AVC msg=audit(1171611634.961:9): avc:  denied  { execute } for  pid=2218 comm="sh" name="ldconfig" dev=dm-0 ino=1409101 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171611634.961:9): arch=40000003 syscall=11 success=no exit=-13 a0=8870d50 a1=8870dd0 a2=88702b8 a3=0 items=0 ppid=2217 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1171611634.962:10): avc:  denied  { execute } for  pid=2218 comm="sh" name="ldconfig" dev=dm-0 ino=1409101 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171611634.962:10): arch=40000003 syscall=33 success=no exit=-13 a0=8870d50 a1=1 a2=11 a3=8870d50 items=0 ppid=2217 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1171611634.963:11): avc:  denied  { read } for  pid=2218 comm="sh" name="ldconfig" dev=dm-0 ino=1409101 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171611634.963:11): arch=40000003 syscall=33 success=no exit=-13 a0=8870d50 a1=4 a2=0 a3=8870d50 items=0 ppid=2217 pid=2218 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1171611634.998:12): avc:  denied  { execute_no_trans } for  pid=2223 comm="ldd" name="ld-2.5.90.so" dev=dm-0 ino=2326646 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:ld_so_t:s0 tclass=file
>type=SYSCALL msg=audit(1171611634.998:12): arch=40000003 syscall=11 success=no exit=-13 a0=92f8288 a1=92f88f8 a2=92fecb8 a3=40 items=0 ppid=2220 pid=2223 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldd" exe="/bin/bash" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171611634.998:12):  path="/lib/ld-2.5.90.so"
>type=AVC msg=audit(1171611635.008:13): avc:  denied  { execute } for  pid=2225 comm="sh" name="ldconfig" dev=dm-0 ino=1409101 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171611635.008:13): arch=40000003 syscall=11 success=no exit=-13 a0=86eed50 a1=86eedd0 a2=86ee2b8 a3=0 items=0 ppid=2224 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1171611635.009:14): avc:  denied  { execute } for  pid=2225 comm="sh" name="ldconfig" dev=dm-0 ino=1409101 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171611635.009:14): arch=40000003 syscall=33 success=no exit=-13 a0=86eed50 a1=1 a2=11 a3=86eed50 items=0 ppid=2224 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1171611635.009:15): avc:  denied  { read } for  pid=2225 comm="sh" name="ldconfig" dev=dm-0 ino=1409101 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1171611635.009:15): arch=40000003 syscall=33 success=no exit=-13 a0=86eed50 a1=4 a2=0 a3=86eed50 items=0 ppid=2224 pid=2225 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC msg=audit(1171611635.028:16): avc:  denied  { execute_no_trans } for  pid=2228 comm="ldd" name="ld-2.5.90.so" dev=dm-0 ino=2326646 scontext=system_u:system_r:setroubleshootd_t:s0 tcontext=system_u:object_r:ld_so_t:s0 tclass=file
>type=SYSCALL msg=audit(1171611635.028:16): arch=40000003 syscall=11 success=no exit=-13 a0=8f64288 a1=8f648f8 a2=8f6acb8 a3=40 items=0 ppid=2227 pid=2228 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="ldd" exe="/bin/bash" subj=system_u:system_r:setroubleshootd_t:s0 key=(null)
>type=AVC_PATH msg=audit(1171611635.028:16):  path="/lib/ld-2.5.90.so"
>type=USER_ERR msg=audit(1171611650.444:17): user pid=2729 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1171611674.169:18): user pid=2771 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=darwinhwebb : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1171611674.171:19): user pid=2771 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=darwinhwebb : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1171611674.172:20): user pid=2771 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=darwinhwebb : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1171611674.176:21): login pid=2771 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1171611674.200:22): user pid=2771 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=darwinhwebb : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1171611674.583:23): user pid=2771 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=jade-38.winproxy.winproxy, addr=?, terminal=:0 res=success)'
>type=USER_AVC msg=audit(1171611674.614:24): user pid=2229 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.ConsoleKit.Manager member=OpenSessionWithParameters dest=org.freedesktop.ConsoleKit spid=2771 tpid=2434 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=USER_AUTH msg=audit(1171611709.970:25): user pid=2992 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1171611709.971:26): user pid=2992 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1171611710.049:27): user pid=2992 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1171611710.050:28): user pid=2992 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>[root@jade-38 audit]# 
>

Actions: View

Attachments on bug 222498: 145495 | 147658 | 147659 | 148053 | 148176 | 148200 | 148734