Attachment 148734 Details for Bug 222498 – avc messages remining

avc messages remining

avcaudit72940.txt (text/plain), 14.54 KB, created by Darwin H. Webb on 2007-02-24 00:07:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Darwin H. Webb

Created: 2007-02-24 00:07:47 UTC

Size: 14.54 KB

patch

obsolete

># audit.log avc messages after starting Feb 23 with kernel 2940
># Clean install of FD-6.90 dvd with devl updates
># policycoreutils - failed script 
>
>
>type=DAEMON_START msg=audit(1172237461.846:1067) auditd start, ver=1.4.2, format=raw, auid=4294967295 pid=1965 res=success, auditd pid=1965
>type=CONFIG_CHANGE msg=audit(1172237461.483:5): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1172237461.483:6): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1172237461.983:7): audit_backlog_limit=256 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1172237461.983:8): audit_backlog_limit=256 old=64 by auid=4294967295 res=1
>type=AVC msg=audit(1172237469.482:9): avc:  denied  { execute_no_trans } for  pid=2153 comm="hcid" name="bluetoothd-service-input" dev=dm-0 ino=3213891 scontext=system_u:system_r:bluetooth_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1172237469.482:9): arch=40000003 syscall=11 success=no exit=-13 a0=bfd1b118 a1=bfd1b110 a2=bfd1d30c a3=400 items=0 ppid=2124 pid=2153 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="hcid" exe="/usr/sbin/hcid" subj=system_u:system_r:bluetooth_t:s0 key=(null)
>type=AVC_PATH msg=audit(1172237469.482:9):  path="/usr/lib/bluetooth/bluetoothd-service-input"
>type=USER_ERR msg=audit(1172237487.479:10): user pid=2653 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: bad_ident acct=? : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=? res=failed)'
>type=USER_AUTH msg=audit(1172237506.976:11): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: authentication acct=darwinhwebb : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1172237506.976:12): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: accounting acct=darwinhwebb : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1172237506.976:13): user pid=2693 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: setcred acct=darwinhwebb : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1172237506.976:14): login pid=2693 uid=0 old auid=4294967295 new auid=500
>type=USER_START msg=audit(1172237506.976:15): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='PAM: session open acct=darwinhwebb : exe="/usr/sbin/gdm-binary" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_LOGIN msg=audit(1172237507.476:16): user pid=2693 uid=0 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='uid=500: exe="/usr/sbin/gdm-binary" (hostname=ruthie-07.winproxy.winproxy, addr=?, terminal=:0 res=success)'
>type=USER_AVC msg=audit(1172237507.476:17): user pid=2112 uid=81 auid=4294967295 subj=system_u:system_r:system_dbusd_t:s0 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.ConsoleKit.Manager member=OpenSessionWithParameters dest=org.freedesktop.ConsoleKit spid=2693 tpid=2313 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:initrc_t:s0 tclass=dbus : exe="/bin/dbus-daemon" (sauid=81, hostname=?, addr=?, terminal=?)'
>type=AVC msg=audit(1172244059.976:18): avc:  denied  { setuid } for  pid=3313 comm="sendmail" capability=7 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:system_r:logwatch_t:s0 tclass=capability
>type=SYSCALL msg=audit(1172244059.976:18): arch=40000003 syscall=213 success=yes exit=0 a0=0 a1=0 a2=0 a3=bff92610 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:19): avc:  denied  { setuid } for  pid=3313 comm="sendmail" capability=7 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:system_r:logwatch_t:s0 tclass=capability
>type=SYSCALL msg=audit(1172244059.976:19): arch=40000003 syscall=213 success=yes exit=0 a0=0 a1=0 a2=0 a3=bff525d0 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:20): avc:  denied  { setuid } for  pid=3313 comm="sendmail" capability=7 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:system_r:logwatch_t:s0 tclass=capability
>type=SYSCALL msg=audit(1172244059.976:20): arch=40000003 syscall=213 success=no exit=-1 a0=5d a1=40 a2=800e0914 a3=bff525d0 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:21): avc:  denied  { append } for  pid=3313 comm="sendmail" name="main.log" dev=dm-0 ino=131984 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1172244059.976:21): arch=40000003 syscall=5 success=no exit=-13 a0=bff523d8 a1=401 a2=1a0 a3=800e673f items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:22): avc:  denied  { setuid } for  pid=3320 comm="sendmail" capability=7 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:system_r:logwatch_t:s0 tclass=capability
>type=SYSCALL msg=audit(1172244059.976:22): arch=40000003 syscall=213 success=no exit=-1 a0=5d a1=0 a2=bff52388 a3=bff52370 items=0 ppid=3313 pid=3320 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:23): avc:  denied  { append } for  pid=3320 comm="sendmail" name="main.log" dev=dm-0 ino=131984 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1172244059.976:23): arch=40000003 syscall=5 success=no exit=-13 a0=bff523d8 a1=441 a2=1a0 a3=0 items=0 ppid=3313 pid=3320 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:24): avc:  denied  { append } for  pid=3313 comm="sendmail" name="panic.log" dev=dm-0 ino=132298 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:object_r:cron_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1172244059.976:24): arch=40000003 syscall=5 success=no exit=-13 a0=bff52178 a1=401 a2=1a0 a3=2 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:25): avc:  denied  { setuid } for  pid=3327 comm="sendmail" capability=7 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:system_r:logwatch_t:s0 tclass=capability
>type=SYSCALL msg=audit(1172244059.976:25): arch=40000003 syscall=213 success=no exit=-1 a0=5d a1=0 a2=bff52128 a3=bff52110 items=0 ppid=3313 pid=3327 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:26): avc:  denied  { append } for  pid=3327 comm="sendmail" name="panic.log" dev=dm-0 ino=132298 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:object_r:cron_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1172244059.976:26): arch=40000003 syscall=5 success=no exit=-13 a0=bff52178 a1=441 a2=1a0 a3=0 items=0 ppid=3313 pid=3327 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:27): avc:  denied  { create } for  pid=3313 comm="sendmail" scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:system_r:logwatch_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1172244059.976:27): arch=40000003 syscall=102 success=no exit=-13 a0=1 a1=bff51ee8 a2=ba1ff4 a3=14 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:28): avc:  denied  { write } for  pid=3313 comm="sendmail" name="console" dev=tmpfs ino=969 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1172244059.976:28): arch=40000003 syscall=5 success=no exit=-13 a0=b7763d a1=101 a2=0 a3=14 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:29): avc:  denied  { create } for  pid=3313 comm="sendmail" scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:system_r:logwatch_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1172244059.976:29): arch=40000003 syscall=102 success=no exit=-13 a0=1 a1=bff51ee8 a2=ba1ff4 a3=14 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:30): avc:  denied  { write } for  pid=3313 comm="sendmail" name="console" dev=tmpfs ino=969 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1172244059.976:30): arch=40000003 syscall=5 success=no exit=-13 a0=b7763d a1=101 a2=0 a3=14 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:31): avc:  denied  { create } for  pid=3313 comm="sendmail" scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:system_r:logwatch_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1172244059.976:31): arch=40000003 syscall=102 success=no exit=-13 a0=1 a1=bff51eb8 a2=ba1ff4 a3=14 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=AVC msg=audit(1172244059.976:32): avc:  denied  { write } for  pid=3313 comm="sendmail" name="console" dev=tmpfs ino=969 scontext=system_u:system_r:logwatch_t:s0 tcontext=system_u:object_r:console_device_t:s0 tclass=chr_file
>type=SYSCALL msg=audit(1172244059.976:32): arch=40000003 syscall=5 success=no exit=-13 a0=b7763d a1=101 a2=0 a3=14 items=0 ppid=3261 pid=3313 auid=4294967295 uid=0 gid=93 euid=0 suid=0 fsuid=0 egid=93 sgid=93 fsgid=93 tty=(none) comm="sendmail" exe="/usr/sbin/exim" subj=system_u:system_r:logwatch_t:s0 key=(null)
>type=USER_START msg=audit(1172244062.976:33): user pid=3559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0 msg='PAM: session open acct=beaglidx : exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1172244062.976:34): user pid=3559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0 msg='PAM: setcred acct=beaglidx : exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1172244085.972:35): user pid=3559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0 msg='PAM: setcred acct=beaglidx : exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1172244085.972:36): user pid=3559 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0 msg='PAM: session close acct=beaglidx : exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1172244085.972:37): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0 msg='PAM: session open acct=beaglidx : exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_ACQ msg=audit(1172244085.972:38): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0 msg='PAM: setcred acct=beaglidx : exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=CRED_DISP msg=audit(1172244764.369:39): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0 msg='PAM: setcred acct=beaglidx : exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1172244764.369:40): user pid=3581 uid=0 auid=4294967295 subj=system_u:system_r:crond_t:s0 msg='PAM: session close acct=beaglidx : exe="/sbin/runuser" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_AUTH msg=audit(1172272762.097:41): user pid=4953 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_ACCT msg=audit(1172272762.097:42): user pid=4953 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_START msg=audit(1172272762.097:43): user pid=4953 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=CRED_ACQ msg=audit(1172272762.097:44): user pid=4953 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: setcred acct=root : exe="/bin/su" (hostname=?, addr=?, terminal=pts/1 res=success)'
>type=USER_AUTH msg=audit(1172272925.073:45): user pid=4989 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: authentication acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_ACCT msg=audit(1172272925.073:46): user pid=4989 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: accounting acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1172272925.073:47): user pid=4989 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session open acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_END msg=audit(1172273792.940:48): user pid=4989 uid=500 auid=500 subj=user_u:system_r:unconfined_t:s0 msg='PAM: session close acct=root : exe="/usr/sbin/userhelper" (hostname=?, addr=?, terminal=? res=success)'
>[root@ruthie-07 audit]# 
>
>

Actions: View

Attachments on bug 222498: 145495 | 147658 | 147659 | 148053 | 148176 | 148200 | 148734