Attachment 152607 Details for Bug 236448 – audit denies during today

audit denies during today

selected-audit.txt (text/plain), 12.30 KB, created by Michael De La Rue on 2007-04-14 11:15:15 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Michael De La Rue

Created: 2007-04-14 11:15:15 UTC

Size: 12.30 KB

patch

obsolete

>[root@telesfor log]# grep 11765.*denied /var/log/audit/audit.log
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[155261]" dev=sockfs ino=155261 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[154891]" dev=sockfs ino=154891 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[155531]" dev=sockfs ino=155531 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[160034]" dev=sockfs ino=160034 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[160190]" dev=sockfs ino=160190 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[175450]" dev=sockfs ino=175450 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[175203]" dev=sockfs ino=175203 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[205071]" dev=sockfs ino=205071 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[205080]" dev=sockfs ino=205080 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read write } for  pid=8920 comm="usermod" name="[206807]" dev=sockfs ino=206807 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531226.174:128): avc:  denied  { read } for  pid=8920 comm="usermod" name="samba-common-3.0.24-4.fc6.i386.rpm" dev=dm-4 ino=282967 scontext=system_u:system_r:useradd_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[155261]" dev=sockfs ino=155261 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[154891]" dev=sockfs ino=154891 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[155531]" dev=sockfs ino=155531 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[160034]" dev=sockfs ino=160034 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[160190]" dev=sockfs ino=160190 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[175450]" dev=sockfs ino=175450 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[175203]" dev=sockfs ino=175203 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[205071]" dev=sockfs ino=205071 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[205080]" dev=sockfs ino=205080 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read write } for  pid=8969 comm="depmod" name="[206807]" dev=sockfs ino=206807 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531316.263:129): avc:  denied  { read } for  pid=8969 comm="depmod" name="kernel-xen-2.6.20-1.2944.fc6.i686.rpm" dev=dm-4 ino=282958 scontext=system_u:system_r:depmod_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[155261]" dev=sockfs ino=155261 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[154891]" dev=sockfs ino=154891 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[155531]" dev=sockfs ino=155531 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[160034]" dev=sockfs ino=160034 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[160190]" dev=sockfs ino=160190 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[175450]" dev=sockfs ino=175450 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[175203]" dev=sockfs ino=175203 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[205071]" dev=sockfs ino=205071 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[205080]" dev=sockfs ino=205080 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read write } for  pid=9817 comm="semodule" name="[206807]" dev=sockfs ino=206807 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531382.091:130): avc:  denied  { read } for  pid=9817 comm="semodule" name="selinux-policy-targeted-2.4.6-54.fc6.noarch.rpm" dev=dm-4 ino=282973 scontext=system_u:system_r:semanage_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[155261]" dev=sockfs ino=155261 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[154891]" dev=sockfs ino=154891 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[155531]" dev=sockfs ino=155531 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[160034]" dev=sockfs ino=160034 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[160190]" dev=sockfs ino=160190 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[175450]" dev=sockfs ino=175450 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[175203]" dev=sockfs ino=175203 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[205071]" dev=sockfs ino=205071 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[205080]" dev=sockfs ino=205080 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read write } for  pid=9851 comm="restorecon" name="[206807]" dev=sockfs ino=206807 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531397.832:132): avc:  denied  { read } for  pid=9851 comm="restorecon" name="selinux-policy-targeted-2.4.6-54.fc6.noarch.rpm" dev=dm-4 ino=282973 scontext=system_u:system_r:restorecon_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=file
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[155261]" dev=sockfs ino=155261 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[154891]" dev=sockfs ino=154891 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[155531]" dev=sockfs ino=155531 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[160034]" dev=sockfs ino=160034 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[160190]" dev=sockfs ino=160190 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[175450]" dev=sockfs ino=175450 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[175203]" dev=sockfs ino=175203 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[205071]" dev=sockfs ino=205071 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[205080]" dev=sockfs ino=205080 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1176531450.163:133): avc:  denied  { read write } for  pid=10026 comm="rdisc" name="[206807]" dev=sockfs ino=206807 scontext=system_u:system_r:rdisc_t:s0 tcontext=system_u:system_r:rpm_t:s0 tclass=tcp_socket

Actions: View

Attachments on bug 236448: 152607 | 152608 | 152609