Attachment 1976962 Details for Bug 2224599 – fdo-client-avcs

fdo-client-avcs

fdo-avcs.txt (text/plain), 24.08 KB, created by Paul Whalen on 2023-07-21 15:47:42 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Paul Whalen

Created: 2023-07-21 15:47:42 UTC

Size: 24.08 KB

patch

obsolete

>type=AVC msg=audit(1689703785.900:181): avc:  denied  { getattr } for  pid=1279 comm="fdo-client-linu" path="/boot/device-credentials" dev="vda2" ino=24 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
>type=SERVICE_START msg=audit(1689703785.926:182): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdo-client-linuxapp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
>type=SERVICE_STOP msg=audit(1689703785.926:183): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdo-client-linuxapp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
>type=AVC msg=audit(1689704283.118:192): avc:  denied  { getattr } for  pid=1522 comm="fdo-client-linu" path="/etc/device-credentials" dev="dm-1" ino=40315 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=0
>type=SERVICE_START msg=audit(1689704283.125:193): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdo-client-linuxapp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
>type=SERVICE_STOP msg=audit(1689704283.125:194): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='unit=fdo-client-linuxapp comm="systemd" exe="/usr/lib/systemd/systemd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
>type=AVC msg=audit(1689704302.214:197): avc:  denied  { getattr } for  pid=1534 comm="fdo-client-linu" path="/etc/device-credentials" dev="dm-1" ino=40315 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.214:198): avc:  denied  { read } for  pid=1534 comm="fdo-client-linu" name="device-credentials" dev="dm-1" ino=40315 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.214:199): avc:  denied  { open } for  pid=1534 comm="fdo-client-linu" path="/etc/device-credentials" dev="dm-1" ino=40315 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.286:200): avc:  denied  { write } for  pid=1534 comm="fdo-client-linu" name="hosts" dev="dm-1" ino=37021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.286:201): avc:  denied  { setattr } for  pid=1534 comm="fdo-client-linu" name="hosts" dev="dm-1" ino=37021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:net_conf_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.288:202): avc:  denied  { read } for  pid=1534 comm="fdo-client-linu" name="passwd" dev="dm-1" ino=37071 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.288:203): avc:  denied  { open } for  pid=1534 comm="fdo-client-linu" path="/etc/passwd" dev="dm-1" ino=37071 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.288:204): avc:  denied  { getattr } for  pid=1534 comm="fdo-client-linu" path="/etc/passwd" dev="dm-1" ino=37071 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.289:205): avc:  denied  { read } for  pid=1534 comm="fdo-client-linu" name="userdb" dev="tmpfs" ino=50 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:systemd_userdbd_runtime_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.289:206): avc:  denied  { write } for  pid=1534 comm="fdo-client-linu" name="io.systemd.Home" dev="tmpfs" ino=1323 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:systemd_userdbd_runtime_t:s0 tclass=sock_file permissive=1
>type=AVC msg=audit(1689704302.289:207): avc:  denied  { read } for  pid=1534 comm="fdo-client-linu" name="io.systemd.DropIn" dev="tmpfs" ino=627 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:systemd_userdbd_runtime_t:s0 tclass=lnk_file permissive=1
>type=AVC msg=audit(1689704302.289:208): avc:  denied  { connectto } for  pid=1534 comm="fdo-client-linu" path="/run/systemd/userdb/io.systemd.Multiplexer" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:systemd_userdbd_t:s0 tclass=unix_stream_socket permissive=1
>type=AVC msg=audit(1689704302.289:209): avc:  denied  { connectto } for  pid=1534 comm="fdo-client-linu" path="/run/systemd/userdb/io.systemd.DynamicUser" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1
>type=AVC msg=audit(1689704302.289:210): avc:  denied  { execute } for  pid=1537 comm="fdo-client-linu" name="useradd" dev="dm-1" ino=18773 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.289:211): avc:  denied  { read open } for  pid=1537 comm="fdo-client-linu" path="/usr/sbin/useradd" dev="dm-1" ino=18773 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.289:212): avc:  denied  { execute_no_trans } for  pid=1537 comm="fdo-client-linu" path="/usr/sbin/useradd" dev="dm-1" ino=18773 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.290:213): avc:  denied  { map } for  pid=1537 comm="useradd" path="/usr/sbin/useradd" dev="dm-1" ino=18773 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.291:214): avc:  denied  { create } for  pid=1537 comm="useradd" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=netlink_audit_socket permissive=1
>type=AVC msg=audit(1689704302.293:215): avc:  denied  { write } for  pid=1537 comm="useradd" name=".pwd.lock" dev="dm-1" ino=37069 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.293:216): avc:  denied  { lock } for  pid=1537 comm="useradd" path="/etc/.pwd.lock" dev="dm-1" ino=37069 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.293:217): avc:  denied  { write } for  pid=1537 comm="useradd" name="etc" dev="dm-1" ino=36996 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.293:218): avc:  denied  { add_name } for  pid=1537 comm="useradd" name="passwd.1537" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.293:219): avc:  denied  { create } for  pid=1537 comm="useradd" name="passwd.1537" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.293:220): avc:  denied  { write } for  pid=1537 comm="useradd" path="/etc/passwd.1537" dev="dm-1" ino=40316 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.295:221): avc:  denied  { link } for  pid=1537 comm="useradd" name="passwd.1537" dev="dm-1" ino=40316 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.295:222): avc:  denied  { remove_name } for  pid=1537 comm="useradd" name="passwd.1537" dev="dm-1" ino=40316 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.295:223): avc:  denied  { unlink } for  pid=1537 comm="useradd" name="passwd.1537" dev="dm-1" ino=40316 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.297:224): avc:  denied  { dac_override } for  pid=1537 comm="useradd" capability=1  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>type=AVC msg=audit(1689704302.297:225): avc:  denied  { read write } for  pid=1537 comm="useradd" name="gshadow" dev="dm-1" ino=37018 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.298:226): avc:  denied  { open } for  pid=1537 comm="useradd" path="/etc/gshadow" dev="dm-1" ino=37018 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.298:227): avc:  denied  { getattr } for  pid=1537 comm="useradd" path="/etc/gshadow" dev="dm-1" ino=37018 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.302:228): avc:  denied  { create } for  pid=1537 comm="useradd" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=unix_dgram_socket permissive=1
>type=AVC msg=audit(1689704302.302:229): avc:  denied  { connect } for  pid=1537 comm="useradd" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=unix_dgram_socket permissive=1
>type=AVC msg=audit(1689704302.302:230): avc:  denied  { read } for  pid=1537 comm="useradd" name="log" dev="devtmpfs" ino=169 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=lnk_file permissive=1
>type=AVC msg=audit(1689704302.302:231): avc:  denied  { write } for  pid=1537 comm="useradd" name="dev-log" dev="tmpfs" ino=58 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file permissive=1
>type=AVC msg=audit(1689704302.302:232): avc:  denied  { sendto } for  pid=1537 comm="useradd" path="/run/systemd/journal/dev-log" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1
>type=AVC msg=audit(1689704302.302:233): avc:  denied  { nlmsg_relay } for  pid=1537 comm="useradd" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=netlink_audit_socket permissive=1
>type=AVC msg=audit(1689704302.302:234): avc:  denied  { audit_write } for  pid=1537 comm="useradd" capability=29  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>type=ADD_GROUP msg=audit(1689704302.302:235): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:fdo_t:s0 msg='op=add-group acct="pwhalen" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
>type=ADD_USER msg=audit(1689704302.303:236): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:fdo_t:s0 msg='op=add-user acct="pwhalen" exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset"
>type=AVC msg=audit(1689704302.303:237): avc:  denied  { search } for  pid=1537 comm="useradd" name="contexts" dev="dm-1" ino=39995 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:default_context_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.303:238): avc:  denied  { search } for  pid=1537 comm="useradd" name="files" dev="dm-1" ino=40013 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.303:239): avc:  denied  { read } for  pid=1537 comm="useradd" name="file_contexts.subs_dist" dev="dm-1" ino=40020 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.303:240): avc:  denied  { open } for  pid=1537 comm="useradd" path="/etc/selinux/targeted/contexts/files/file_contexts.subs_dist" dev="dm-1" ino=40020 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.303:241): avc:  denied  { getattr } for  pid=1537 comm="useradd" path="/etc/selinux/targeted/contexts/files/file_contexts.subs_dist" dev="dm-1" ino=40020 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.303:242): avc:  denied  { map } for  pid=1537 comm="useradd" path="/etc/selinux/targeted/contexts/files/file_contexts.bin" dev="dm-1" ino=40015 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.306:243): avc:  denied  { setfscreate } for  pid=1537 comm="useradd" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=process permissive=1
>type=AVC msg=audit(1689704302.306:244): avc:  denied  { create } for  pid=1537 comm="useradd" name="passwd-" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.306:245): avc:  denied  { setattr } for  pid=1537 comm="useradd" name="passwd-" dev="dm-1" ino=37070 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.309:246): avc:  denied  { rename } for  pid=1537 comm="useradd" name="passwd+" dev="dm-1" ino=40322 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.309:247): avc:  denied  { unlink } for  pid=1537 comm="useradd" name="passwd" dev="dm-1" ino=37071 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.309:248): avc:  denied  { create } for  pid=1537 comm="useradd" name="shadow-" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.309:249): avc:  denied  { setattr } for  pid=1537 comm="useradd" name="shadow-" dev="dm-1" ino=37044 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.311:250): avc:  denied  { rename } for  pid=1537 comm="useradd" name="shadow+" dev="dm-1" ino=37071 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.311:251): avc:  denied  { unlink } for  pid=1537 comm="useradd" name="shadow" dev="dm-1" ino=37072 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.316:252): avc:  denied  { setattr } for  pid=1537 comm="useradd" name="subuid-" dev="dm-1" ino=37018 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.318:253): avc:  denied  { rename } for  pid=1537 comm="useradd" name="subuid+" dev="dm-1" ino=40325 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.336:254): avc:  denied  { read } for  pid=1537 comm="useradd" name="passwd" dev="dm-1" ino=40322 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.336:255): avc:  denied  { open } for  pid=1537 comm="useradd" path="/etc/passwd" dev="dm-1" ino=40322 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.336:256): avc:  denied  { getattr } for  pid=1537 comm="useradd" path="/etc/passwd" dev="dm-1" ino=40322 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.336:257): avc:  denied  { write } for  pid=1537 comm="useradd" name="home" dev="dm-1" ino=31718 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.336:258): avc:  denied  { add_name } for  pid=1537 comm="useradd" name="pwhalen" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.336:259): avc:  denied  { create } for  pid=1537 comm="useradd" name="pwhalen" scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.336:260): avc:  denied  { setattr } for  pid=1537 comm="useradd" name="pwhalen" dev="dm-1" ino=37059 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.336:261): avc:  denied  { chown } for  pid=1537 comm="useradd" capability=0  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>type=AVC msg=audit(1689704302.336:262): avc:  denied  { fowner } for  pid=1537 comm="useradd" capability=3  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>type=AVC msg=audit(1689704302.336:263): avc:  denied  { fsetid } for  pid=1537 comm="useradd" capability=4  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>type=USER_MGMT msg=audit(1689704302.336:264): pid=1537 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:fdo_t:s0 msg='op=add-home-dir id=1000 exe="/usr/sbin/useradd" hostname=? addr=? terminal=? res=success'UID="root" AUID="unset" ID="pwhalen"
>type=AVC msg=audit(1689704302.336:265): avc:  denied  { dac_read_search } for  pid=1537 comm="useradd" capability=2  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>type=AVC msg=audit(1689704302.336:266): avc:  denied  { read } for  pid=1537 comm="useradd" name="pwhalen" dev="dm-1" ino=37059 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.336:267): avc:  denied  { open } for  pid=1537 comm="useradd" path="/var/home/pwhalen" dev="dm-1" ino=37059 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.338:268): avc:  denied  { search } for  pid=1537 comm="useradd" name="pwhalen" dev="dm-1" ino=37059 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.338:269): avc:  denied  { write } for  pid=1537 comm="useradd" name="pwhalen" dev="dm-1" ino=37059 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.338:270): avc:  denied  { add_name } for  pid=1537 comm="useradd" name=".bash_profile" scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.338:271): avc:  denied  { create } for  pid=1537 comm="useradd" name=".bash_profile" scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.338:272): avc:  denied  { write open } for  pid=1537 comm="useradd" path="/var/home/pwhalen/.bash_profile" dev="dm-1" ino=40316 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.338:273): avc:  denied  { setattr } for  pid=1537 comm="useradd" name=".bash_profile" dev="dm-1" ino=40316 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.342:274): avc:  denied  { search } for  pid=1537 comm="useradd" name="mail" dev="dm-1" ino=31735 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.342:275): avc:  denied  { write } for  pid=1537 comm="useradd" name="mail" dev="dm-1" ino=31735 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.342:276): avc:  denied  { add_name } for  pid=1537 comm="useradd" name="pwhalen" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.342:277): avc:  denied  { create } for  pid=1537 comm="useradd" name="pwhalen" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.342:278): avc:  denied  { write open } for  pid=1537 comm="useradd" path="/var/spool/mail/pwhalen" dev="dm-1" ino=40319 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.342:279): avc:  denied  { setattr } for  pid=1537 comm="useradd" name="pwhalen" dev="dm-1" ino=40319 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.345:280): avc:  denied  { create } for  pid=1534 comm="fdo-client-linu" name=".ssh" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.345:281): avc:  denied  { getattr } for  pid=1534 comm="fdo-client-linu" path="/var/home/pwhalen/.ssh" dev="dm-1" ino=40320 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.345:282): avc:  denied  { setattr } for  pid=1534 comm="fdo-client-linu" name=".ssh" dev="dm-1" ino=40320 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.345:283): avc:  denied  { search } for  pid=1534 comm="fdo-client-linu" name=".ssh" dev="dm-1" ino=40320 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.345:284): avc:  denied  { write } for  pid=1534 comm="fdo-client-linu" name=".ssh" dev="dm-1" ino=40320 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.345:285): avc:  denied  { add_name } for  pid=1534 comm="fdo-client-linu" name="authorized_keys" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>type=AVC msg=audit(1689704302.345:286): avc:  denied  { create } for  pid=1534 comm="fdo-client-linu" name="authorized_keys" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.345:287): avc:  denied  { write open } for  pid=1534 comm="fdo-client-linu" path="/var/home/pwhalen/.ssh/authorized_keys" dev="dm-1" ino=40321 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.345:288): avc:  denied  { getattr } for  pid=1534 comm="fdo-client-linu" path="/var/home/pwhalen/.ssh/authorized_keys" dev="dm-1" ino=40321 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.345:289): avc:  denied  { setattr } for  pid=1534 comm="fdo-client-linu" name="authorized_keys" dev="dm-1" ino=40321 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.347:290): avc:  denied  { read } for  pid=1534 comm="fdo-client-linu" name="device-credentials" dev="dm-1" ino=40315 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.347:291): avc:  denied  { open } for  pid=1534 comm="fdo-client-linu" path="/etc/device-credentials" dev="dm-1" ino=40315 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.347:292): avc:  denied  { getattr } for  pid=1534 comm="fdo-client-linu" path="/etc/device-credentials" dev="dm-1" ino=40315 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>type=AVC msg=audit(1689704302.347:293): avc:  denied  { write } for  pid=1534 comm="fdo-client-linu" name="device-credentials" dev="dm-1" ino=40315 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>

Actions: View

Attachments on bug 2224599: 1976962