Attachment 1712641 Details for Bug 1870476 – ausearch permissive

ausearch permissive

file_1870476.txt (text/plain), 20.12 KB, created by Alessio on 2020-08-26 07:51:18 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Alessio

Created: 2020-08-26 07:51:18 UTC

Size: 20.12 KB

patch

obsolete

>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.659:249) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.659:249) : item=0 name=ipc inode=4026532508 dev=00:04 mode=file,444 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:nsfs_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.659:249) : cwd=/run/gnome-initial-setup 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.659:249) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x6 a1=0x55fa5048a275 a2=0x7fff214aeb50 a3=0x0 items=1 ppid=1367 pid=1555 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.659:249) : avc:  denied  { getattr } for  pid=1555 comm=bwrap path=ipc:[4026532508] dev="nsfs" ino=4026532508 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:nsfs_t:s0 tclass=file permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.660:250) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=SOCKADDR msg=audit(08/26/2020 09:49:00.660:250) : saddr={ saddr_fam=netlink nlnk-fam=16 nlnk-pid=0 } 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.660:250) : arch=x86_64 syscall=sendto success=yes exit=40 a0=0x5 a1=0x7fff214aeb50 a2=0x28 a3=0x0 items=0 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.660:250) : avc:  denied  { net_admin } for  pid=1556 comm=bwrap capability=net_admin  scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.663:251) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.663:251) : item=0 name=/ inode=256 dev=00:1f mode=dir,555 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:root_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.663:251) : cwd=/run/gnome-initial-setup 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.663:251) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x0 a1=0x55fa5048aec6 a2=0x0 a3=MS_REC|MS_SLAVE items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.663:251) : avc:  denied  { mounton } for  pid=1556 comm=bwrap path=/ dev="sda2" ino=256 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.663:252) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.663:252) : item=0 name=/tmp inode=4933 dev=00:26 mode=dir,sticky,777 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.663:252) : cwd=/run/gnome-initial-setup 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.663:252) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa5048adf8 a1=0x55fa5048ade3 a2=0x55fa5048adf8 a3=MS_NOSUID|MS_NODEV items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.663:252) : avc:  denied  { mounton } for  pid=1556 comm=bwrap path=/tmp dev="tmpfs" ino=4933 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.667:253) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.667:253) : item=0 name=/newroot/etc inode=268 dev=00:1f mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.667:253) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.667:253) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa5048a7cb a1=0x55fa5079c8d0 a2=0x0 a3=MS_RDONLY|MS_NOSUID|MS_NODEV|MS_REMOUNT|MS_BIND|MS_RELATIME items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.667:253) : avc:  denied  { remount } for  pid=1556 comm=bwrap scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.667:254) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.667:254) : item=1 name=/oldroot/dev/null inode=6154 dev=00:05 mode=character,666 ouid=root ogid=root rdev=01:03 obj=system_u:object_r:null_device_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=PATH msg=audit(08/26/2020 09:49:00.667:254) : item=0 name=/newroot/dev/null inode=42271 dev=00:34 mode=file,666 ouid=gnome-initial-setup ogid=gnome-initial-setup rdev=00:00 obj=system_u:object_r:user_tmp_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.667:254) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.667:254) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa507802c0 a1=0x55fa50780370 a2=0x0 a3=MS_BIND|MS_REC items=2 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.667:254) : avc:  denied  { mounton } for  pid=1556 comm=bwrap path=/newroot/dev/null dev="tmpfs" ino=42271 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:user_tmp_t:s0 tclass=file permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.669:255) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.669:255) : item=0 name=/newroot/dev/pts inode=42283 dev=00:34 mode=dir,755 ouid=gnome-initial-setup ogid=gnome-initial-setup rdev=00:00 obj=system_u:object_r:user_tmp_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.669:255) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.669:255) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa5048aa18 a1=0x55fa50780370 a2=0x55fa5048aa18 a3=MS_NOSUID|MS_NOEXEC items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.669:255) : avc:  denied  { mount } for  pid=1556 comm=bwrap name=/ dev="devpts" ino=1 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devpts_t:s0 tclass=filesystem permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.670:256) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.670:256) : item=0 name=/newroot/proc inode=42285 dev=00:33 mode=dir,755 ouid=gnome-initial-setup ogid=gnome-initial-setup rdev=00:00 obj=system_u:object_r:user_tmp_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.670:256) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.670:256) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa5048a362 a1=0x55fa50780350 a2=0x55fa5048a362 a3=MS_NOSUID|MS_NODEV|MS_NOEXEC items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.670:256) : avc:  denied  { mount } for  pid=1556 comm=bwrap name=/ dev="proc" ino=1 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_t:s0 tclass=filesystem permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.670:257) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.670:257) : item=0 name=/newroot/proc/sysrq-trigger inode=4026532104 dev=00:36 mode=file,200 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:sysctl_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.670:257) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.670:257) : arch=x86_64 syscall=access success=no exit=EACCES(Permission denied) a0=0x55fa50780500 a1=W_OK a2=0x55fa5078051b a3=0xe items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.670:257) : avc:  denied  { dac_override } for  pid=1556 comm=bwrap capability=dac_override  scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=cap_userns permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.671:258) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.671:258) : item=0 name=/newroot/sys/block inode=4116 dev=00:15 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:sysfs_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.671:258) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.671:258) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa5048a7cb a1=0x55fa5079c8d0 a2=0x0 a3=MS_RDONLY|MS_NOSUID|MS_NODEV|MS_NOEXEC|MS_REMOUNT|MS_BIND|MS_RELATIME items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.671:258) : avc:  denied  { remount } for  pid=1556 comm=bwrap scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:sysfs_t:s0 tclass=filesystem permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.673:259) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.673:259) : item=1 name=/oldroot/usr/share inode=2060 dev=00:1f mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:usr_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=PATH msg=audit(08/26/2020 09:49:00.673:259) : item=0 name=/newroot/usr/share inode=2060 dev=00:1f mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:usr_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.673:259) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.673:259) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa50780350 a1=0x55fa50780370 a2=0x0 a3=MS_BIND|MS_REC items=2 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.673:259) : avc:  denied  { mounton } for  pid=1556 comm=bwrap path=/newroot/usr/share dev="sda2" ino=2060 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:usr_t:s0 tclass=dir permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.675:260) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.675:260) : item=1 name=/oldroot/usr/lib64 inode=2056 dev=00:1f mode=dir,555 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:lib_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=PATH msg=audit(08/26/2020 09:49:00.675:260) : item=0 name=/newroot/usr/lib64 inode=2056 dev=00:1f mode=dir,555 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:lib_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.675:260) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.675:260) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa50780350 a1=0x55fa50780370 a2=0x0 a3=MS_BIND|MS_REC items=2 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.675:260) : avc:  denied  { mounton } for  pid=1556 comm=bwrap path=/newroot/usr/lib64 dev="sda2" ino=2056 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:lib_t:s0 tclass=dir permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.676:261) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.676:261) : item=1 name=/oldroot/usr/share/zoneinfo/Europe/Rome inode=155673 dev=00:1f mode=file,644 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:locale_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=PATH msg=audit(08/26/2020 09:49:00.676:261) : item=0 name=/newroot/usr/share/zoneinfo/Europe/Rome inode=155673 dev=00:1f mode=file,644 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:locale_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.676:261) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.676:261) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa50780500 a1=0x55fa507804d0 a2=0x0 a3=MS_BIND|MS_REC items=2 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.676:261) : avc:  denied  { mounton } for  pid=1556 comm=bwrap path=/newroot/usr/share/zoneinfo/Europe/Rome dev="sda2" ino=155673 scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:locale_t:s0 tclass=file permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.677:262) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.677:262) : item=0 name=/newroot/.flatpak-info inode=42310 dev=00:33 mode=file,600 ouid=gnome-initial-setup ogid=gnome-initial-setup rdev=00:00 obj=system_u:object_r:user_tmp_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0 
>type=CWD msg=audit(08/26/2020 09:49:00.677:262) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.677:262) : arch=x86_64 syscall=mount success=yes exit=0 a0=0x55fa5048a7cb a1=0x55fa5079c8d0 a2=0x0 a3=MS_RDONLY|MS_NOSUID|MS_NODEV|MS_REMOUNT|MS_BIND|MS_RELATIME items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.677:262) : avc:  denied  { remount } for  pid=1556 comm=bwrap scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.681:263) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.681:263) : item=0 name=oldroot inode=256 dev=00:1f mode=dir,555 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:root_t:s0 nametype=NORMAL cap_fe=? cap_fver=? cap_fp=none cap_fi=none 
>type=CWD msg=audit(08/26/2020 09:49:00.681:263) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.681:263) : arch=x86_64 syscall=umount2 success=yes exit=0 a0=0x55fa5048aef8 a1=MNT_DETACH a2=0x0 a3=0x44000 items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.681:263) : avc:  denied  { unmount } for  pid=1556 comm=bwrap scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 
>----
>type=PROCTITLE msg=audit(08/26/2020 09:49:00.682:264) : proctitle=/usr/bin/bwrap --args 49 -- /usr/libexec/webkit2gtk-4.0/WebKitWebProcess 8 44 
>type=PATH msg=audit(08/26/2020 09:49:00.682:264) : item=0 name=. inode=42264 dev=00:33 mode=dir,sticky,777 ouid=gnome-initial-setup ogid=gnome-initial-setup rdev=00:00 obj=system_u:object_r:user_tmp_t:s0 nametype=NORMAL cap_fe=? cap_fver=? cap_fp=none cap_fi=none 
>type=CWD msg=audit(08/26/2020 09:49:00.682:264) : cwd=/ 
>type=SYSCALL msg=audit(08/26/2020 09:49:00.682:264) : arch=x86_64 syscall=umount2 success=yes exit=0 a0=0x55fa5048aed7 a1=MNT_DETACH a2=0x7f648207ce3b a3=0x0 items=1 ppid=1555 pid=1556 auid=unset uid=gnome-initial-setup gid=gnome-initial-setup euid=gnome-initial-setup suid=gnome-initial-setup fsuid=gnome-initial-setup egid=gnome-initial-setup sgid=gnome-initial-setup fsgid=gnome-initial-setup tty=tty1 ses=unset comm=bwrap exe=/usr/bin/bwrap subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(08/26/2020 09:49:00.682:264) : avc:  denied  { unmount } for  pid=1556 comm=bwrap scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1

Actions: View

Attachments on bug 1870476: 1712629 | 1712630 | 1712641 | 1715190