Attachment 1712629 Details for Bug 1870476 – ausearch

ausearch

file_1870476.txt (text/plain), 9.33 KB, created by Alessio on 2020-08-26 06:39:43 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alessio

Created: 2020-08-26 06:39:43 UTC

Size: 9.33 KB

patch

obsolete

>----
>type=PROCTITLE msg=audit(08/26/2020 08:33:24.586:235) : proctitle=/bin/login -p --      
>type=SYSCALL msg=audit(08/26/2020 08:33:24.586:235) : arch=x86_64 syscall=fstatfs success=no exit=EACCES(Permission denied) a0=0x7 a1=0x7ffe9fbe8210 a2=0x8041 a3=0x20000000 items=0 ppid=1600 pid=1609 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=tty3 ses=unset comm=login exe=/usr/bin/login subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:33:24.586:235) : avc:  denied  { getattr } for  pid=1609 comm=login name=/ dev="proc" ino=1 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=filesystem permissive=0 
>----
>type=PROCTITLE msg=audit(08/26/2020 08:33:27.042:240) : proctitle=/bin/login -p --      
>type=SYSCALL msg=audit(08/26/2020 08:33:27.042:240) : arch=x86_64 syscall=fstatfs success=no exit=EACCES(Permission denied) a0=0x7 a1=0x7ffe9fbe7ec0 a2=0x8041 a3=0x231 items=0 ppid=1600 pid=1615 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=tty3 ses=unset comm=login exe=/usr/bin/login subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:33:27.042:240) : avc:  denied  { getattr } for  pid=1615 comm=login name=/ dev="proc" ino=1 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=filesystem permissive=0 
>----
>type=PROCTITLE msg=audit(08/26/2020 08:33:27.073:242) : proctitle=/bin/login -p --      
>type=SYSCALL msg=audit(08/26/2020 08:33:27.073:242) : arch=x86_64 syscall=fstatfs success=no exit=EACCES(Permission denied) a0=0x7 a1=0x7ffe9fbe8150 a2=0x8041 a3=0x231 items=0 ppid=1600 pid=1616 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=tty3 ses=unset comm=login exe=/usr/bin/login subj=system_u:system_r:local_login_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:33:27.073:242) : avc:  denied  { getattr } for  pid=1616 comm=login name=/ dev="proc" ino=1 scontext=system_u:system_r:local_login_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=filesystem permissive=0 
>----
>type=PROCTITLE msg=audit(08/26/2020 08:34:50.227:276) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 08:34:50.227:276) : item=0 name=ipc inode=4026532351 dev=00:04 mode=file,444 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:nsfs_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 08:34:50.227:276) : cwd=/run/gnome-initial-setup 
>type=SYSCALL msg=audit(08/26/2020 08:34:50.227:276) : arch=x86_64 syscall=newfstatat success=no exit=EACCES(Permission denied) a0=0x6 a1=0x5612c7362275 a2=0x7ffc134cbf20 a3=0x0 items=1 ppid=1371 pid=1781 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:34:50.227:276) : avc:  denied  { getattr } for  pid=1781 comm=bwrap path=ipc:[4026532351] dev="nsfs" ino=4026532351 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 
>----
>type=PROCTITLE msg=audit(08/26/2020 08:34:50.227:277) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 08:34:50.227:277) : item=0 name=mnt inode=4026532349 dev=00:04 mode=file,444 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:nsfs_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 08:34:50.227:277) : cwd=/run/gnome-initial-setup 
>type=SYSCALL msg=audit(08/26/2020 08:34:50.227:277) : arch=x86_64 syscall=newfstatat success=no exit=EACCES(Permission denied) a0=0x6 a1=0x5612c7363014 a2=0x7ffc134cbf20 a3=0x0 items=1 ppid=1371 pid=1781 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:34:50.227:277) : avc:  denied  { getattr } for  pid=1781 comm=bwrap path=mnt:[4026532349] dev="nsfs" ino=4026532349 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 
>----
>type=PROCTITLE msg=audit(08/26/2020 08:34:50.227:278) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 08:34:50.227:278) : item=0 name=net inode=4026532354 dev=00:04 mode=file,444 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:nsfs_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 08:34:50.227:278) : cwd=/run/gnome-initial-setup 
>type=SYSCALL msg=audit(08/26/2020 08:34:50.227:278) : arch=x86_64 syscall=newfstatat success=no exit=EACCES(Permission denied) a0=0x6 a1=0x5612c73622d1 a2=0x7ffc134cbf20 a3=0x0 items=1 ppid=1371 pid=1781 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:34:50.227:278) : avc:  denied  { getattr } for  pid=1781 comm=bwrap path=net:[4026532354] dev="nsfs" ino=4026532354 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 
>----
>type=PROCTITLE msg=audit(08/26/2020 08:34:50.227:279) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 08:34:50.227:279) : item=0 name=pid inode=4026532352 dev=00:04 mode=file,444 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:nsfs_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 08:34:50.227:279) : cwd=/run/gnome-initial-setup 
>type=SYSCALL msg=audit(08/26/2020 08:34:50.227:279) : arch=x86_64 syscall=newfstatat success=no exit=EACCES(Permission denied) a0=0x6 a1=0x5612c7362d11 a2=0x7ffc134cbf20 a3=0x0 items=1 ppid=1371 pid=1781 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:34:50.227:279) : avc:  denied  { getattr } for  pid=1781 comm=bwrap path=pid:[4026532352] dev="nsfs" ino=4026532352 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 
>----
>type=PROCTITLE msg=audit(08/26/2020 08:34:50.227:280) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 08:34:50.227:280) : item=0 name=uts inode=4026532350 dev=00:04 mode=file,444 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:nsfs_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 08:34:50.227:280) : cwd=/run/gnome-initial-setup 
>type=SYSCALL msg=audit(08/26/2020 08:34:50.227:280) : arch=x86_64 syscall=newfstatat success=no exit=EACCES(Permission denied) a0=0x6 a1=0x5612c736229f a2=0x7ffc134cbf20 a3=0x0 items=1 ppid=1371 pid=1781 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:34:50.227:280) : avc:  denied  { getattr } for  pid=1781 comm=bwrap path=uts:[4026532350] dev="nsfs" ino=4026532350 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=0 
>----
>type=PROCTITLE msg=audit(08/26/2020 08:34:50.228:281) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=SOCKADDR msg=audit(08/26/2020 08:34:50.228:281) : saddr={ saddr_fam=netlink nlnk-fam=16 nlnk-pid=0 } 
>type=SYSCALL msg=audit(08/26/2020 08:34:50.228:281) : arch=x86_64 syscall=sendto success=yes exit=40 a0=0x5 a1=0x7ffc134cbf20 a2=0x28 a3=0x0 items=0 ppid=1781 pid=1782 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 08:34:50.228:281) : avc:  denied  { net_admin } for  pid=1782 comm=bwrap capability=net_admin  scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=cap_userns permissive=0

Actions: View

Attachments on bug 1870476: 1712629 | 1712630 | 1712641 | 1715190