Attachment 191661 Details for Bug 284581 – AVC messages from audit.log

AVC messages from audit.log

AVC.txt (text/plain), 13.14 KB, created by Markku Kolkka on 2007-09-10 13:50:55 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Markku Kolkka

Created: 2007-09-10 13:50:55 UTC

Size: 13.14 KB

patch

obsolete

>type=AVC msg=audit(1189431290.569:715): avc:  denied  { search } for  pid=25142 comm="smbd" name="bin" dev=dm-0 ino=196610 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=dir
>type=AVC msg=audit(1189431290.569:715): avc:  denied  { read } for  pid=25142 comm="smbd" name="sh" dev=dm-0 ino=196615 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=lnk_file
>type=AVC msg=audit(1189431290.569:715): avc:  denied  { execute } for  pid=25142 comm="smbd" name="bash" dev=dm-0 ino=196648 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
>type=AVC msg=audit(1189431290.569:715): avc:  denied  { execute_no_trans } for  pid=25142 comm="smbd" name="bash" dev=dm-0 ino=196648 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
>type=AVC msg=audit(1189431290.569:715): avc:  denied  { read } for  pid=25142 comm="smbd" name="bash" dev=dm-0 ino=196648 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.569:715): arch=40000003 syscall=11 success=yes exit=0 a0=c6e130 a1=bfaeaa88 a2=a0670f8 a3=400 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.573:716): avc:  denied  { getattr } for  pid=25142 comm="sh" name="bash" dev=dm-0 ino=196648 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.573:716): arch=40000003 syscall=195 success=yes exit=0 a0=998d6e8 a1=bff60a30 a2=46fcbff4 a3=998d6e8 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.574:717): avc:  denied  { execute } for  pid=25142 comm="sh" name="useradd" dev=dm-4 ino=1802323 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file
>type=AVC msg=audit(1189431290.574:717): avc:  denied  { execute_no_trans } for  pid=25142 comm="sh" name="useradd" dev=dm-4 ino=1802323 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file
>type=AVC msg=audit(1189431290.574:717): avc:  denied  { read } for  pid=25142 comm="sh" name="useradd" dev=dm-4 ino=1802323 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.574:717): arch=40000003 syscall=11 success=yes exit=0 a0=998fe90 a1=998ff68 a2=998fea8 a3=998f878 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.628:719): avc:  denied  { write } for  pid=25142 comm="useradd" name=".pwd.lock" dev=dm-0 ino=65827 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.628:719): arch=40000003 syscall=5 success=yes exit=4 a0=46fb38cb a1=41 a2=180 a3=ffffffff items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.629:720): avc:  denied  { lock } for  pid=25142 comm="useradd" name=".pwd.lock" dev=dm-0 ino=65827 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.629:720): arch=40000003 syscall=221 success=yes exit=0 a0=4 a1=7 a2=bfbd788c a3=bfbd788c items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.629:721): avc:  denied  { write } for  pid=25142 comm="useradd" name="etc" dev=dm-0 ino=65538 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>type=AVC msg=audit(1189431290.629:721): avc:  denied  { add_name } for  pid=25142 comm="useradd" name="passwd.25142" scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>type=AVC msg=audit(1189431290.629:721): avc:  denied  { create } for  pid=25142 comm="useradd" name="passwd.25142" scontext=user_u:system_r:smbd_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.629:721): arch=40000003 syscall=5 success=yes exit=6 a0=bfbd7478 a1=80c1 a2=180 a3=80c1 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.629:722): avc:  denied  { write } for  pid=25142 comm="useradd" name="passwd.25142" dev=dm-0 ino=66372 scontext=user_u:system_r:smbd_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.629:722): arch=40000003 syscall=4 success=yes exit=6 a0=6 a1=bfbd7878 a2=6 a3=6 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.630:723): avc:  denied  { link } for  pid=25142 comm="useradd" name="passwd.25142" dev=dm-0 ino=66372 scontext=user_u:system_r:smbd_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.630:723): arch=40000003 syscall=9 success=yes exit=0 a0=bfbd7478 a1=bfbd7078 a2=6 a3=6 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.630:724): avc:  denied  { remove_name } for  pid=25142 comm="useradd" name="passwd.25142" dev=dm-0 ino=66372 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir
>type=AVC msg=audit(1189431290.630:724): avc:  denied  { unlink } for  pid=25142 comm="useradd" name="passwd.25142" dev=dm-0 ino=66372 scontext=user_u:system_r:smbd_t:s0 tcontext=user_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.630:724): arch=40000003 syscall=10 success=yes exit=0 a0=bfbd7478 a1=bfbd6fd8 a2=1 a3=6 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.630:725): avc:  denied  { write } for  pid=25142 comm="useradd" name="passwd" dev=dm-0 ino=66392 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.630:725): arch=40000003 syscall=5 success=yes exit=6 a0=8058b00 a1=8002 a2=1b6 a3=929a6f0 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.640:726): avc:  denied  { read write } for  pid=25142 comm="useradd" name="faillog" dev=dm-5 ino=163843 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:var_log_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.640:726): arch=40000003 syscall=5 success=yes exit=10 a0=8054974 a1=8002 a2=0 a3=8002 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.642:727): avc:  denied  { read write } for  pid=25142 comm="useradd" name="lastlog" dev=dm-5 ino=163854 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:lastlog_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.642:727): arch=40000003 syscall=5 success=yes exit=10 a0=8054985 a1=8002 a2=0 a3=8002 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=USER_CHAUTHTOK msg=audit(1189431290.642:728): user pid=25142 uid=0 auid=500 subj=user_u:system_r:smbd_t:s0 msg='op=adding user acct=testi1$ exe="/usr/sbin/useradd" (hostname=?, addr=?, terminal=? res=success)'
>type=AVC msg=audit(1189431290.642:729): avc:  denied  { execute } for  pid=25143 comm="useradd" name="nscd" dev=dm-4 ino=1802375 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:nscd_exec_t:s0 tclass=file
>type=AVC msg=audit(1189431290.642:729): avc:  denied  { execute_no_trans } for  pid=25143 comm="useradd" name="nscd" dev=dm-4 ino=1802375 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:nscd_exec_t:s0 tclass=file
>type=AVC msg=audit(1189431290.642:729): avc:  denied  { read } for  pid=25143 comm="useradd" name="nscd" dev=dm-4 ino=1802375 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:nscd_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.642:729): arch=40000003 syscall=11 success=yes exit=0 a0=8055d52 a1=bfbd78d4 a2=bfbd78e8 a3=0 items=0 ppid=25142 pid=25143 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="nscd" exe="/usr/sbin/nscd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.652:730): avc:  denied  { setfscreate } for  pid=25142 comm="useradd" scontext=user_u:system_r:smbd_t:s0 tcontext=user_u:system_r:smbd_t:s0 tclass=process
>type=SYSCALL msg=audit(1189431290.652:730): arch=40000003 syscall=4 success=yes exit=27 a0=a a1=92a0a78 a2=1b a3=473cd928 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.652:731): avc:  denied  { setattr } for  pid=25142 comm="useradd" name="passwd-" dev=dm-0 ino=65831 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.652:731): arch=40000003 syscall=30 success=yes exit=0 a0=bfbd74b8 a1=bfbd64b0 a2=0 a3=929a6f0 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.652:732): avc:  denied  { create } for  pid=25142 comm="useradd" name="passwd+" scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.652:732): arch=40000003 syscall=5 success=yes exit=6 a0=bfbd74b8 a1=8241 a2=1b6 a3=929a6f0 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.769:733): avc:  denied  { rename } for  pid=25142 comm="useradd" name="passwd+" dev=dm-0 ino=67292 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=AVC msg=audit(1189431290.769:733): avc:  denied  { unlink } for  pid=25142 comm="useradd" name="passwd" dev=dm-0 ino=66392 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.769:733): arch=40000003 syscall=38 success=yes exit=0 a0=bfbd74b8 a1=8058b00 a2=bfbd63f0 a3=0 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.771:734): avc:  denied  { setattr } for  pid=25142 comm="useradd" name="shadow-" dev=dm-0 ino=67203 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.771:734): arch=40000003 syscall=30 success=yes exit=0 a0=bfbd74b8 a1=bfbd64b0 a2=0 a3=929a980 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.771:735): avc:  denied  { create } for  pid=25142 comm="useradd" name="shadow+" scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.771:735): arch=40000003 syscall=5 success=yes exit=6 a0=bfbd74b8 a1=8241 a2=1b6 a3=929a980 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1189431290.849:736): avc:  denied  { rename } for  pid=25142 comm="useradd" name="shadow+" dev=dm-0 ino=66392 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=AVC msg=audit(1189431290.849:736): avc:  denied  { unlink } for  pid=25142 comm="useradd" name="shadow" dev=dm-0 ino=66393 scontext=user_u:system_r:smbd_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1189431290.849:736): arch=40000003 syscall=38 success=yes exit=0 a0=bfbd74b8 a1=8059380 a2=bfbd63f0 a3=0 items=0 ppid=25141 pid=25142 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="useradd" exe="/usr/sbin/useradd" subj=user_u:system_r:smbd_t:s0 key=(null)

Actions: View

Attachments on bug 284581: 191661