Attachment 150773 Details for Bug 233641 – audit log for snmp avc denied messages

audit log for snmp avc denied messages

snmp.audit.log (text/plain), 5.34 KB, created by Subhendu Ghosh on 2007-03-23 16:23:31 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Subhendu Ghosh

Created: 2007-03-23 16:23:31 UTC

Size: 5.34 KB

patch

obsolete

>type=AVC msg=audit(1174662494.047:633): avc:  denied  { search } for  pid=7436 comm="snmpd" name="mail" dev=dm-0 ino=910718 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=dir
>type=AVC msg=audit(1174662494.047:633): avc:  denied  { read } for  pid=7436 comm="snmpd" name="sendmail.cf" dev=dm-0 ino=911059 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=file
>type=SYSCALL msg=audit(1174662494.047:633): arch=40000003 syscall=5 success=yes exit=7 a0=bd8240 a1=8000 a2=1b6 a3=9b3ae30 items=0 ppid=1 pid=7436 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmpd" exe="/usr/sbin/snmpd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1174662494.096:634): avc:  denied  { getattr } for  pid=7436 comm="snmpd" name="sendmail.cf" dev=dm-0 ino=911059 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=file
>type=SYSCALL msg=audit(1174662494.096:634): arch=40000003 syscall=197 success=yes exit=0 a0=7 a1=bfa1a7c8 a2=94eff4 a3=9b3ae30 items=0 ppid=1 pid=7436 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmpd" exe="/usr/sbin/snmpd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1174662494.126:635): avc:  denied  { search } for  pid=7436 comm="snmpd" name="spool" dev=dm-0 ino=1495593 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:var_spool_t:s0 tclass=dir
>type=AVC msg=audit(1174662494.126:635): avc:  denied  { search } for  pid=7436 comm="snmpd" name="mqueue" dev=dm-0 ino=1660528 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1174662494.126:635): arch=40000003 syscall=5 success=no exit=-2 a0=bfa1a777 a1=18800 a2=e a3=bfa1a777 items=0 ppid=1 pid=7436 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmpd" exe="/usr/sbin/snmpd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1174662494.135:636): avc:  denied  { search } for  pid=7436 comm="snmpd" name="mail" dev=dm-0 ino=1660525 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:sendmail_log_t:s0 tclass=dir
>type=AVC msg=audit(1174662494.135:636): avc:  denied  { read } for  pid=7436 comm="snmpd" name="statistics" dev=dm-0 ino=1660526 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:sendmail_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1174662494.135:636): arch=40000003 syscall=5 success=yes exit=7 a0=bd8160 a1=8000 a2=0 a3=8000 items=0 ppid=1 pid=7436 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmpd" exe="/usr/sbin/snmpd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1174662820.972:649): avc:  denied  { search } for  pid=7538 comm="snmpd" name="mail" dev=dm-0 ino=910718 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=dir
>type=AVC msg=audit(1174662820.972:649): avc:  denied  { read } for  pid=7538 comm="snmpd" name="sendmail.cf" dev=dm-0 ino=911059 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=file
>type=SYSCALL msg=audit(1174662820.972:649): arch=40000003 syscall=5 success=yes exit=7 a0=6c6240 a1=8000 a2=1b6 a3=8419e30 items=0 ppid=7537 pid=7538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmpd" exe="/usr/sbin/snmpd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1174662820.974:650): avc:  denied  { getattr } for  pid=7538 comm="snmpd" name="sendmail.cf" dev=dm-0 ino=911059 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:etc_mail_t:s0 tclass=file
>type=SYSCALL msg=audit(1174662820.974:650): arch=40000003 syscall=197 success=yes exit=0 a0=7 a1=bf8f7788 a2=429ff4 a3=8419e30 items=0 ppid=7537 pid=7538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmpd" exe="/usr/sbin/snmpd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1174662820.974:651): avc:  denied  { search } for  pid=7538 comm="snmpd" name="spool" dev=dm-0 ino=1495593 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:var_spool_t:s0 tclass=dir
>type=AVC msg=audit(1174662820.974:651): avc:  denied  { search } for  pid=7538 comm="snmpd" name="mqueue" dev=dm-0 ino=1660528 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:mqueue_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1174662820.974:651): arch=40000003 syscall=5 success=no exit=-2 a0=bf8f7737 a1=18800 a2=e a3=bf8f7737 items=0 ppid=7537 pid=7538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmpd" exe="/usr/sbin/snmpd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1174662820.975:652): avc:  denied  { search } for  pid=7538 comm="snmpd" name="mail" dev=dm-0 ino=1660525 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:sendmail_log_t:s0 tclass=dir
>type=AVC msg=audit(1174662820.975:652): avc:  denied  { read } for  pid=7538 comm="snmpd" name="statistics" dev=dm-0 ino=1660526 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:sendmail_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1174662820.975:652): arch=40000003 syscall=5 success=yes exit=7 a0=6c6160 a1=8000 a2=0 a3=8000 items=0 ppid=7537 pid=7538 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmpd" exe="/usr/sbin/snmpd" subj=user_u:system_r:snmpd_t:s0 key=(null)

Actions: View

Attachments on bug 233641: 150773