Attachment 1982118 Details for Bug 2229722 – FDO client avc log

FDO client avc log

fdo_client_avc.log (text/plain), 366.48 KB, created by Xiaofeng Wang on 2023-08-07 13:01:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Xiaofeng Wang

Created: 2023-08-07 13:01:36 UTC

Size: 366.48 KB

patch

obsolete

>type=PROCTITLE msg=audit(08/07/23 07:58:01.232:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.232:51) : arch=x86_64 syscall=statx success=yes exit=0 a0=0xffffff9c a1=0x7ffcb2cd7930 a2=0x0 a3=0xfff items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.232:51) : avc:  denied  { getattr } for  pid=1273 comm=fdo-client-linu path=/boot/device-credentials dev="vda3" ino=136 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.233:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.233:52) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffcb2cd7880 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.233:52) : avc:  denied  { open } for  pid=1273 comm=fdo-client-linu path=/boot/device-credentials dev="vda3" ino=136 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.233:52) : avc:  denied  { read } for  pid=1273 comm=fdo-client-linu name=device-credentials dev="vda3" ino=136 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.365:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 07:58:01.365:53) : item=3 name=(null) inode=17528937 dev=fd:01 mode=file,644 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.365:53) : item=2 name=(null) inode=17524694 dev=fd:01 mode=dir,750 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.365:53) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.365:53) : item=0 name=(null) inode=17524694 dev=fd:01 mode=dir,750 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.365:53) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:01.365:53) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffcb2cd5ff8 a2=O_WRONLY|O_CREAT|O_TRUNC|O_CLOEXEC a3=0x1b6 items=4 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.365:53) : avc:  denied  { write } for  pid=1273 comm=fdo-client-linu path=/etc/sudoers.d/fdouser dev="dm-1" ino=17528937 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.365:53) : avc:  denied  { create } for  pid=1273 comm=fdo-client-linu name=fdouser scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.365:53) : avc:  denied  { add_name } for  pid=1273 comm=fdo-client-linu name=fdouser scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.365:53) : avc:  denied  { write } for  pid=1273 comm=fdo-client-linu name=sudoers.d dev="dm-1" ino=17524694 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.365:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.365:54) : arch=x86_64 syscall=fchmod success=yes exit=0 a0=0xa a1=0600 a2=0x0 a3=0x1b6 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.365:54) : avc:  denied  { setattr } for  pid=1273 comm=fdo-client-linu name=fdouser dev="dm-1" ino=17528937 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.371:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.371:55) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x555d3d794e20 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.371:55) : avc:  denied  { open } for  pid=1273 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=232 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.371:55) : avc:  denied  { read } for  pid=1273 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=232 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.371:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.371:56) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xa a1=0x7fc1fbd02f35 a2=0x7ffcb2cd5cd0 a3=0x1000 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.371:56) : avc:  denied  { getattr } for  pid=1273 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=232 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.371:57) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.371:57) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xa a1=0x1268 a2=0x7ffcb2cd5c5c a3=0x1000 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.371:57) : avc:  denied  { ioctl } for  pid=1273 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=232 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.371:58) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.371:58) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xa a1=0x7ffcb2cd5c30 a2=0x7fc1fbcff4a4 a3=0x1000 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.371:58) : avc:  denied  { getattr } for  pid=1273 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.371:59) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.371:59) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7fc1fc473037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.371:59) : avc:  denied  { open } for  pid=1273 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.371:59) : avc:  denied  { read } for  pid=1273 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.372:60) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 07:58:01.372:60) : item=3 name=(null) inode=1247 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.372:60) : item=2 name=(null) inode=95 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.372:60) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.372:60) : item=0 name=(null) inode=95 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.372:60) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:01.372:60) : arch=x86_64 syscall=openat success=yes exit=13 a0=0xe a1=0x7ffcb2cd4940 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.372:60) : avc:  denied  { read write open } for  pid=1273 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.372:60) : avc:  denied  { create } for  pid=1273 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.372:60) : avc:  denied  { add_name } for  pid=1273 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.372:60) : avc:  denied  { write } for  pid=1273 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=95 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.372:61) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.372:61) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xd a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.372:61) : avc:  denied  { lock } for  pid=1273 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.372:62) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.372:62) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xd a1=0x7fc1fbd02f35 a2=0x7ffcb2cd48d0 a3=0x1000 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.372:62) : avc:  denied  { getattr } for  pid=1273 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.374:63) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:01.374:63) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffcb2cd49c0 a1=0x7ffcb2cd49c0 a2=0x7ffcb2cd48a0 a3=0x0 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.374:63) : avc:  denied  { unlink } for  pid=1273 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.374:63) : avc:  denied  { remove_name } for  pid=1273 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.374:64) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 1
>    type=PATH msg=audit(08/07/23 07:58:01.374:64) : item=1 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.374:64) : item=0 name=/usr/bin/bash inode=8392074 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.374:64) : cwd=/
>    type=EXECVE msg=audit(08/07/23 07:58:01.374:64) : argc=9 a0=/usr/bin/bash a1=-e a2=/usr/bin/clevis a3=luks a4=pass a5=-d a6=/dev/vda4 a7=-s a8=1
>    type=SYSCALL msg=audit(08/07/23 07:58:01.374:64) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x7fc1fb52ddc0 a1=0x555d3d7b7100 a2=0x555d3d65eb50 a3=0x8 items=2 ppid=1273 pid=1304 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.374:64) : avc:  denied  { map } for  pid=1304 comm=clevis path=/usr/bin/bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.374:64) : avc:  denied  { execute } for  pid=1304 comm=fdo-client-linu name=bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.374:64) : avc:  denied  { execute_no_trans } for  pid=1304 comm=fdo-client-linu path=/usr/bin/clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.374:64) : avc:  denied  { execute } for  pid=1304 comm=fdo-client-linu name=clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.377:65) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 1
>    type=SYSCALL msg=audit(08/07/23 07:58:01.377:65) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7f5ab3c60e17 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1273 pid=1304 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.377:65) : avc:  denied  { open } for  pid=1304 comm=clevis path=/etc/passwd dev="dm-1" ino=639123 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.377:65) : avc:  denied  { read } for  pid=1304 comm=clevis name=passwd dev="dm-1" ino=639123 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.377:66) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 1
>    type=SYSCALL msg=audit(08/07/23 07:58:01.377:66) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x3 a1=0x7f5ab3c5cf35 a2=0x7ffcebc2b9c0 a3=0x1000 items=0 ppid=1273 pid=1304 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.377:66) : avc:  denied  { getattr } for  pid=1304 comm=clevis path=/etc/passwd dev="dm-1" ino=639123 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.386:67) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 1
>    type=SYSCALL msg=audit(08/07/23 07:58:01.386:67) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x564e09d7c590 a2=0x7fff99ffde70 a3=0x0 items=0 ppid=1304 pid=1307 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.386:67) : avc:  denied  { getattr } for  pid=1307 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.386:68) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 1
>    type=SYSCALL msg=audit(08/07/23 07:58:01.386:68) : arch=x86_64 syscall=access success=yes exit=0 a0=0x564e09d7c590 a1=X_OK a2=0x7fff99ffdd90 a3=0x0 items=0 ppid=1304 pid=1307 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.386:68) : avc:  denied  { execute } for  pid=1307 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.387:69) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 1
>    type=SYSCALL msg=audit(08/07/23 07:58:01.387:69) : arch=x86_64 syscall=access success=yes exit=0 a0=0x564e09d7c590 a1=R_OK a2=0x7fff99ffdd90 a3=0x0 items=0 ppid=1304 pid=1307 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.387:69) : avc:  denied  { read } for  pid=1307 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.387:70) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=PATH msg=audit(08/07/23 07:58:01.387:70) : item=0 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.387:70) : cwd=/
>    type=EXECVE msg=audit(08/07/23 07:58:01.387:70) : argc=5 a0=cryptsetup a1=isLuks a2=--type a3=luks1 a4=/dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.387:70) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x564e09d7c590 a1=0x564e09d7c700 a2=0x564e09d71730 a3=0x564e09d7cdd0 items=1 ppid=1307 pid=1308 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.387:70) : avc:  denied  { map } for  pid=1308 comm=cryptsetup path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.387:70) : avc:  denied  { execute_no_trans } for  pid=1308 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.387:70) : avc:  denied  { open } for  pid=1308 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.396:71) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.396:71) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0x3 a1=0x7ffe2a2e9760 a2=0x7f7e8675a4a4 a3=0x1000 items=0 ppid=1307 pid=1308 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.396:71) : avc:  denied  { getattr } for  pid=1308 comm=cryptsetup name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.408:72) : proctitle=sed -rn s|^\s+([0-9]+): clevis|\1|p
>    type=EXECVE msg=audit(08/07/23 07:58:01.408:72) : argc=3 a0=sed a1=-rn a2=s|^\s+([0-9]+): clevis|\1|p
>    type=SYSCALL msg=audit(08/07/23 07:58:01.408:72) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x564e09e08590 a1=0x564e09e09540 a2=0x564e09e09570 a3=0x8 items=0 ppid=1311 pid=1315 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=sed exe=/usr/bin/sed subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.408:72) : avc:  denied  { map } for  pid=1315 comm=sed path=/usr/bin/sed dev="dm-1" ino=25531310 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.442:73) : proctitle=jose fmt -j- -Og jwe -o-
>    type=EXECVE msg=audit(08/07/23 07:58:01.442:73) : argc=6 a0=jose a1=fmt a2=-j- a3=-Og a4=jwe a5=-o-
>    type=SYSCALL msg=audit(08/07/23 07:58:01.442:73) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x564e09d7c820 a1=0x564e09d76fe0 a2=0x564e09e0a250 a3=0x8c2e5f44 items=0 ppid=1319 pid=1320 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=jose exe=/usr/bin/jose subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.442:73) : avc:  denied  { execute } for  pid=1320 comm=jose path=/usr/bin/jose dev="dm-1" ino=16919866 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.442:73) : avc:  denied  { map } for  pid=1320 comm=jose path=/usr/bin/jose dev="dm-1" ino=16919866 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.452:74) : proctitle=jose jwe fmt -i- -c
>    type=PATH msg=audit(08/07/23 07:58:01.452:74) : item=0 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.452:74) : cwd=/
>    type=EXECVE msg=audit(08/07/23 07:58:01.452:74) : argc=5 a0=jose a1=jwe a2=fmt a3=-i- a4=-c
>    type=SYSCALL msg=audit(08/07/23 07:58:01.452:74) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x564e09e07ba0 a1=0x564e09d76fe0 a2=0x564e09e0a1d0 a3=0x8 items=1 ppid=1319 pid=1321 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=jose exe=/usr/bin/jose subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.452:74) : avc:  denied  { execute_no_trans } for  pid=1321 comm=clevis-luks-pas path=/usr/bin/jose dev="dm-1" ino=16919866 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.508:75) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=PATH msg=audit(08/07/23 07:58:01.508:75) : item=3 name=(null) inode=1258 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.508:75) : item=2 name=(null) inode=95 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.508:75) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.508:75) : item=0 name=(null) inode=95 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.508:75) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:01.508:75) : arch=x86_64 syscall=openat success=yes exit=6 a0=0x7 a1=0x7ffdf173f070 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.508:75) : avc:  denied  { read write open } for  pid=1344 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1258 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.508:75) : avc:  denied  { create } for  pid=1344 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.508:76) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.508:76) : arch=x86_64 syscall=flock success=yes exit=0 a0=0x6 a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.508:76) : avc:  denied  { lock } for  pid=1344 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1258 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.508:77) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.508:77) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x6 a1=0x7f7369b12f35 a2=0x7ffdf173f000 a3=0x1000 items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.508:77) : avc:  denied  { getattr } for  pid=1344 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1258 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.510:78) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.510:78) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffdf173f0f0 a1=0x7ffdf173f0f0 a2=0x7ffdf173efd0 a3=0x0 items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.510:78) : avc:  denied  { unlink } for  pid=1344 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1258 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.531:80) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.531:80) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffdf173f240 a2=0x7ffdf173f160 a3=0x0 items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.531:80) : avc:  denied  { getattr } for  pid=1344 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.532:81) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.532:81) : arch=x86_64 syscall=openat success=yes exit=6 a0=AT_FDCWD a1=0x7ffdf173f240 a2=O_RDWR a3=0x0 items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.532:81) : avc:  denied  { open } for  pid=1344 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.532:81) : avc:  denied  { read write } for  pid=1344 comm=cryptsetup name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.532:82) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.532:82) : arch=x86_64 syscall=openat success=yes exit=7 a0=AT_FDCWD a1=0x7f73699457c2 a2=O_RDONLY a3=0x0 items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.532:82) : avc:  denied  { open } for  pid=1344 comm=cryptsetup path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.532:82) : avc:  denied  { read } for  pid=1344 comm=cryptsetup name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.532:83) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.532:83) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x7 a1=0x7f7369b12f35 a2=0x7ffdf173ef00 a3=0x1000 items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.532:83) : avc:  denied  { getattr } for  pid=1344 comm=cryptsetup path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.532:84) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.532:84) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x6 a1=0xc138fd00 a2=0x559569133a70 a3=0x7ffdf173ddd2 items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.532:84) : avc:  denied  { ioctl } for  pid=1344 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd00 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.532:85) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.532:85) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffdf17404c0 items=0 ppid=1304 pid=1344 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.532:85) : avc:  denied  { ipc_info } for  pid=1344 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.557:86) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.557:86) : arch=x86_64 syscall=openat success=yes exit=4 a0=AT_FDCWD a1=0x7fec709dc037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1377 pid=1378 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.557:86) : avc:  denied  { open } for  pid=1378 comm=cryptsetup path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.557:86) : avc:  denied  { read } for  pid=1378 comm=cryptsetup name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.646:90) : proctitle=clevis-pin-tpm2 encrypt {}
>    type=SYSCALL msg=audit(08/07/23 07:58:01.646:90) : arch=x86_64 syscall=statx success=yes exit=0 a0=0xffffff9c a1=0x558156bf0c00 a2=0x0 a3=0xfff items=0 ppid=1444 pid=1446 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.646:90) : avc:  denied  { getattr } for  pid=1446 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.650:91) : proctitle=clevis-pin-tpm2 encrypt {}
>    type=SYSCALL msg=audit(08/07/23 07:58:01.650:91) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7ffd9b7795f0 a2=O_RDWR|O_NONBLOCK a3=0x0 items=0 ppid=1444 pid=1446 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.650:91) : avc:  denied  { open } for  pid=1446 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.650:91) : avc:  denied  { read write } for  pid=1446 comm=clevis-pin-tpm2 name=tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.650:91) : avc:  denied  { dac_override } for  pid=1446 comm=clevis-pin-tpm2 capability=dac_override  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.786:93) : proctitle=mktemp -d
>    type=PATH msg=audit(08/07/23 07:58:01.786:93) : item=1 name=(null) inode=639161 dev=fd:01 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.786:93) : item=0 name=(null) inode=17525388 dev=fd:01 mode=dir,sticky,777 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.786:93) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:01.786:93) : arch=x86_64 syscall=mkdir success=yes exit=0 a0=0x55582d37bb90 a1=0700 a2=0x6 a3=0xf61e20b285fb9ace items=2 ppid=1361 pid=1571 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=mktemp exe=/usr/bin/mktemp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.786:93) : avc:  denied  { create } for  pid=1571 comm=mktemp name=tmp.PWtqsqTXjO scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.786:93) : avc:  denied  { add_name } for  pid=1571 comm=mktemp name=tmp.PWtqsqTXjO scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.786:93) : avc:  denied  { write } for  pid=1571 comm=mktemp name=tmp dev="dm-1" ino=17525388 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.786:94) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-bind -d /dev/vda4 tpm2 {} -y -k -
>    type=PATH msg=audit(08/07/23 07:58:01.786:94) : item=3 name=(null) inode=639162 dev=fd:01 mode=file,644 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.786:94) : item=2 name=(null) inode=639161 dev=fd:01 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.786:94) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.786:94) : item=0 name=(null) inode=639161 dev=fd:01 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.786:94) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:01.786:94) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x55ee27cc27c0 a2=O_WRONLY|O_CREAT|O_TRUNC a3=0x1b6 items=4 ppid=1273 pid=1361 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-bin exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.786:94) : avc:  denied  { write open } for  pid=1361 comm=clevis-luks-bin path=/tmp/tmp.PWtqsqTXjO/device dev="dm-1" ino=639162 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.786:94) : avc:  denied  { create } for  pid=1361 comm=clevis-luks-bin name=device scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.820:95) : proctitle=cryptsetup luksHeaderBackup /dev/vda4 --batch-mode --header-backup-file /tmp/tmp.PWtqsqTXjO/vda4.header
>    type=PATH msg=audit(08/07/23 07:58:01.820:95) : item=3 name=(null) inode=639163 dev=fd:01 mode=file,400 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.820:95) : item=2 name=(null) inode=639161 dev=fd:01 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.820:95) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:01.820:95) : item=0 name=(null) inode=639161 dev=fd:01 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:tmp_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:01.820:95) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:01.820:95) : arch=x86_64 syscall=openat success=yes exit=6 a0=AT_FDCWD a1=0x564b12b60250 a2=O_WRONLY|O_CREAT|O_EXCL a3=0x100 items=4 ppid=1361 pid=1573 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.820:95) : avc:  denied  { add_name } for  pid=1573 comm=cryptsetup name=vda4.header scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.820:95) : avc:  denied  { write } for  pid=1573 comm=cryptsetup name=tmp.PWtqsqTXjO dev="dm-1" ino=639161 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.837:97) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.837:97) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x555d82acd760 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1361 pid=1579 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.837:97) : avc:  denied  { open } for  pid=1579 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=232 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.837:97) : avc:  denied  { read } for  pid=1579 comm=cryptsetup name=vda4 dev="devtmpfs" ino=232 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.837:98) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.837:98) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x3 a1=0x7fefe9865f35 a2=0x7ffebbdeb200 a3=0x1000 items=0 ppid=1361 pid=1579 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.837:98) : avc:  denied  { getattr } for  pid=1579 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=232 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.837:99) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:58:01.837:99) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0x1268 a2=0x7ffebbdeb18c a3=0x1000 items=0 ppid=1361 pid=1579 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.837:99) : avc:  denied  { ioctl } for  pid=1579 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=232 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.920:100) : proctitle=cryptsetup luksAddKey --force-password --batch-mode --key-slot 0 /dev/vda4 --pbkdf pbkdf2 --pbkdf-force-iterations 1000
>    type=SYSCALL msg=audit(08/07/23 07:58:01.920:100) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffe6ee41830 a2=0x7ffe6ee41750 a3=0x0 items=0 ppid=1361 pid=1608 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.920:100) : avc:  denied  { getattr } for  pid=1608 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.920:101) : proctitle=cryptsetup luksAddKey --force-password --batch-mode --key-slot 0 /dev/vda4 --pbkdf pbkdf2 --pbkdf-force-iterations 1000
>    type=SYSCALL msg=audit(08/07/23 07:58:01.920:101) : arch=x86_64 syscall=openat success=yes exit=6 a0=AT_FDCWD a1=0x7ffe6ee41830 a2=O_RDWR a3=0x0 items=0 ppid=1361 pid=1608 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.920:101) : avc:  denied  { open } for  pid=1608 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:01.920:101) : avc:  denied  { read write } for  pid=1608 comm=cryptsetup name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.920:102) : proctitle=cryptsetup luksAddKey --force-password --batch-mode --key-slot 0 /dev/vda4 --pbkdf pbkdf2 --pbkdf-force-iterations 1000
>    type=SYSCALL msg=audit(08/07/23 07:58:01.920:102) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x6 a1=0xc138fd00 a2=0x55f6645f8ff0 a3=0x7ffe6ee403c2 items=0 ppid=1361 pid=1608 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.920:102) : avc:  denied  { ioctl } for  pid=1608 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd00 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:01.934:103) : proctitle=cryptsetup luksAddKey --force-password --batch-mode --key-slot 0 /dev/vda4 --pbkdf pbkdf2 --pbkdf-force-iterations 1000
>    type=SYSCALL msg=audit(08/07/23 07:58:01.934:103) : arch=x86_64 syscall=openat success=yes exit=7 a0=AT_FDCWD a1=0x55f6645c08e0 a2=O_RDWR|O_DIRECT a3=0x0 items=0 ppid=1361 pid=1608 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:01.934:103) : avc:  denied  { write } for  pid=1608 comm=cryptsetup name=vda4 dev="devtmpfs" ino=232 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.002:104) : proctitle=rm -rf /tmp/tmp.PWtqsqTXjO
>    type=SYSCALL msg=audit(08/07/23 07:58:02.002:104) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x55f62a90dc20 a2=O_RDONLY|O_NOCTTY|O_NONBLOCK|O_DIRECTORY|O_NOFOLLOW a3=0x0 items=0 ppid=1361 pid=1626 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=rm exe=/usr/bin/rm subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.002:104) : avc:  denied  { read } for  pid=1626 comm=rm name=tmp.PWtqsqTXjO dev="dm-1" ino=639161 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.002:105) : proctitle=rm -rf /tmp/tmp.PWtqsqTXjO
>    type=SYSCALL msg=audit(08/07/23 07:58:02.002:105) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0x3 a1=0x7fffd1ee3ed0 a2=0x10 a3=0x9b items=0 ppid=1361 pid=1626 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=rm exe=/usr/bin/rm subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.002:105) : avc:  denied  { getattr } for  pid=1626 comm=rm name=/ dev="dm-1" ino=128 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.002:106) : proctitle=rm -rf /tmp/tmp.PWtqsqTXjO
>    type=SYSCALL msg=audit(08/07/23 07:58:02.002:106) : arch=x86_64 syscall=unlinkat success=yes exit=0 a0=0x4 a1=0x55f62a90f060 a2=0x0 a3=0x9b items=0 ppid=1361 pid=1626 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=rm exe=/usr/bin/rm subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.002:106) : avc:  denied  { unlink } for  pid=1626 comm=rm name=device dev="dm-1" ino=639162 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.002:106) : avc:  denied  { remove_name } for  pid=1626 comm=rm name=device dev="dm-1" ino=639162 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.006:107) : proctitle=rm -rf /tmp/tmp.PWtqsqTXjO
>    type=SYSCALL msg=audit(08/07/23 07:58:02.006:107) : arch=x86_64 syscall=unlinkat success=yes exit=0 a0=AT_FDCWD a1=0x55f62a90dc20 a2=0x200 a3=0x9b items=0 ppid=1361 pid=1626 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=rm exe=/usr/bin/rm subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.006:107) : avc:  denied  { rmdir } for  pid=1626 comm=rm name=tmp.PWtqsqTXjO dev="dm-1" ino=639161 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.013:108) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.013:108) : arch=x86_64 syscall=openat success=no exit=ENOENT(No such file or directory) a0=AT_FDCWD a1=0x7ffcb2cd4ae0 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.013:108) : avc:  denied  { read } for  pid=1273 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18362 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.315:109) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.315:109) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7fc1fb512308 a2=O_RDONLY|O_NONBLOCK|O_DIRECTORY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.315:109) : avc:  denied  { read } for  pid=1273 comm=fdo-client-linu name=userdb dev="tmpfs" ino=52 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:systemd_userdbd_runtime_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.316:110) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.316:110) : arch=x86_64 syscall=connect success=yes exit=0 a0=0xd a1=0x7ffcb2cd5ab0 a2=0x2d a3=0xf00 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.316:110) : avc:  denied  { connectto } for  pid=1273 comm=fdo-client-linu path=/run/systemd/userdb/io.systemd.DynamicUser scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_stream_socket permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.316:110) : avc:  denied  { write } for  pid=1273 comm=fdo-client-linu name=io.systemd.DynamicUser dev="tmpfs" ino=53 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:systemd_userdbd_runtime_t:s0 tclass=sock_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.317:111) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.317:111) : item=0 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.317:111) : cwd=/
>    type=EXECVE msg=audit(08/07/23 07:58:02.317:111) : argc=3 a0=useradd a1=-m a2=fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.317:111) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x7fc1fb354dc0 a1=0x555d3d7c2e50 a2=0x555d3d65eb50 a3=0x8 items=1 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.317:111) : avc:  denied  { map } for  pid=1655 comm=useradd path=/usr/sbin/useradd dev="dm-1" ino=8736414 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.317:111) : avc:  denied  { execute_no_trans } for  pid=1655 comm=fdo-client-linu path=/usr/sbin/useradd dev="dm-1" ino=8736414 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.317:111) : avc:  denied  { read open } for  pid=1655 comm=fdo-client-linu path=/usr/sbin/useradd dev="dm-1" ino=8736414 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.317:111) : avc:  denied  { execute } for  pid=1655 comm=fdo-client-linu name=useradd dev="dm-1" ino=8736414 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:useradd_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.325:112) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.325:112) : arch=x86_64 syscall=socket success=yes exit=3 a0=netlink a1=SOCK_RAW a2=igp a3=0x0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.325:112) : avc:  denied  { create } for  pid=1655 comm=useradd scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=netlink_audit_socket permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.328:113) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.328:113) : arch=x86_64 syscall=openat success=yes exit=4 a0=AT_FDCWD a1=0x7f75dfcc8204 a2=O_WRONLY|O_CREAT|O_CLOEXEC a3=0x180 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.328:113) : avc:  denied  { write } for  pid=1655 comm=useradd name=.pwd.lock dev="dm-1" ino=634741 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.328:114) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.328:114) : arch=x86_64 syscall=fcntl success=yes exit=0 a0=0x4 a1=F_SETLKW a2=0x7ffc01a73110 a3=0x8 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.328:114) : avc:  denied  { lock } for  pid=1655 comm=useradd path=/etc/.pwd.lock dev="dm-1" ino=634741 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.328:115) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.328:115) : item=3 name=(null) inode=634743 dev=fd:01 mode=file,600 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.328:115) : item=2 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.328:115) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.328:115) : item=0 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.328:115) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.328:115) : arch=x86_64 syscall=openat success=yes exit=5 a0=AT_FDCWD a1=0x55d30386bfa0 a2=O_WRONLY|O_CREAT|O_TRUNC a3=0x180 items=4 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.328:115) : avc:  denied  { write } for  pid=1655 comm=useradd path=/etc/passwd.1655 dev="dm-1" ino=634743 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.328:115) : avc:  denied  { create } for  pid=1655 comm=useradd name=passwd.1655 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.333:116) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.333:116) : item=1 name=(null) inode=634743 dev=fd:01 mode=file,600 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.333:116) : item=0 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.333:116) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.333:116) : arch=x86_64 syscall=link success=yes exit=0 a0=0x55d30386bfa0 a1=0x55d303870810 a2=0x5 a3=0x677 items=2 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.333:116) : avc:  denied  { link } for  pid=1655 comm=useradd name=passwd.1655 dev="dm-1" ino=634743 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.333:117) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.333:117) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x55d30386bfa0 a1=0x55d30386bfa0 a2=0x7ffc01a732b0 a3=0x0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.333:117) : avc:  denied  { unlink } for  pid=1655 comm=useradd name=passwd.1655 dev="dm-1" ino=634743 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.333:117) : avc:  denied  { remove_name } for  pid=1655 comm=useradd name=passwd.1655 dev="dm-1" ino=634743 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.341:118) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.341:118) : arch=x86_64 syscall=openat success=yes exit=7 a0=AT_FDCWD a1=0x55d303322880 a2=O_RDWR|O_NOCTTY|O_NONBLOCK|O_NOFOLLOW a3=0x0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.341:118) : avc:  denied  { open } for  pid=1655 comm=useradd path=/etc/gshadow dev="dm-1" ino=639122 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.341:118) : avc:  denied  { read write } for  pid=1655 comm=useradd name=gshadow dev="dm-1" ino=639122 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.341:119) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.341:119) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x7 a1=0x7f75dfcc4f35 a2=0x7ffc01a73140 a3=0x1000 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.341:119) : avc:  denied  { getattr } for  pid=1655 comm=useradd path=/etc/gshadow dev="dm-1" ino=639122 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.354:120) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.354:120) : arch=x86_64 syscall=socket success=yes exit=11 a0=local a1=SOCK_DGRAM a2=ip a3=0x3e9 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.354:120) : avc:  denied  { create } for  pid=1655 comm=useradd scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=unix_dgram_socket permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.354:121) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.354:121) : item=0 name=/dev/log inode=60 dev=00:18 mode=socket,666 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:devlog_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.354:121) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.354:121) : arch=x86_64 syscall=connect success=yes exit=0 a0=0xb a1=0x7f75dfcc2b60 a2=0x6e a3=0x3e9 items=1 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.354:121) : avc:  denied  { sendto } for  pid=1655 comm=useradd path=/run/systemd/journal/dev-log scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.354:121) : avc:  denied  { write } for  pid=1655 comm=useradd name=dev-log dev="tmpfs" ino=60 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.354:121) : avc:  denied  { read } for  pid=1655 comm=useradd name=log dev="devtmpfs" ino=133 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=lnk_file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.354:121) : avc:  denied  { connect } for  pid=1655 comm=useradd scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=unix_dgram_socket permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.355:122) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.355:122) : arch=x86_64 syscall=sendto success=yes exit=112 a0=0x3 a1=0x7ffc01a6c870 a2=0x70 a3=0x0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.355:122) : avc:  denied  { audit_write } for  pid=1655 comm=useradd capability=audit_write  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.355:122) : avc:  denied  { nlmsg_relay } for  pid=1655 comm=useradd scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=netlink_audit_socket permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.356:124) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.356:124) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x55d30331b55c a2=O_RDWR a3=0x0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.356:124) : avc:  denied  { open } for  pid=1655 comm=useradd path=/var/log/lastlog dev="dm-1" ino=639152 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lastlog_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.356:124) : avc:  denied  { read write } for  pid=1655 comm=useradd name=lastlog dev="dm-1" ino=639152 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lastlog_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.362:126) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.362:126) : item=0 name=/etc/selinux/targeted/contexts/files/file_contexts.subs_dist inode=25805294 dev=fd:01 mode=file,644 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:file_context_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.362:126) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.362:126) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x55d30387efe0 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=1 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.362:126) : avc:  denied  { open } for  pid=1655 comm=useradd path=/etc/selinux/targeted/contexts/files/file_contexts.subs_dist dev="dm-1" ino=25805294 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.362:126) : avc:  denied  { read } for  pid=1655 comm=useradd name=file_contexts.subs_dist dev="dm-1" ino=25805294 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.362:126) : avc:  denied  { search } for  pid=1655 comm=useradd name=files dev="dm-1" ino=25805287 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.362:126) : avc:  denied  { search } for  pid=1655 comm=useradd name=contexts dev="dm-1" ino=17524852 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:default_context_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.362:127) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.362:127) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xc a1=0x7f75dfcc4f35 a2=0x7ffc01a717b0 a3=0x1000 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.362:127) : avc:  denied  { getattr } for  pid=1655 comm=useradd path=/etc/selinux/targeted/contexts/files/file_contexts.subs_dist dev="dm-1" ino=25805294 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.362:128) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.362:128) : arch=x86_64 syscall=mmap success=yes exit=140144230305792 a0=0x0 a1=0x90d85 a2=PROT_READ a3=MAP_PRIVATE items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.362:128) : avc:  denied  { map } for  pid=1655 comm=useradd path=/etc/selinux/targeted/contexts/files/file_contexts.bin dev="dm-1" ino=25805289 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:file_context_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.365:129) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.365:129) : arch=x86_64 syscall=write success=yes exit=35 a0=0xc a1=0x55d30391deb0 a2=0x23 a3=0x0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.365:129) : avc:  denied  { setfscreate } for  pid=1655 comm=useradd scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=process permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.365:130) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.365:130) : arch=x86_64 syscall=fchown success=yes exit=0 a0=0xc a1=0x0 a2=0x0 a3=0x1b6 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.365:130) : avc:  denied  { setattr } for  pid=1655 comm=useradd name=passwd- dev="dm-1" ino=639127 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.368:131) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.368:131) : item=3 name=(null) inode=639165 dev=fd:01 mode=file,000 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:passwd_file_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.368:131) : item=2 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.368:131) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.368:131) : item=0 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.368:131) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.368:131) : arch=x86_64 syscall=openat success=yes exit=5 a0=AT_FDCWD a1=0x7ffc01a72f50 a2=O_WRONLY|O_CREAT|O_TRUNC a3=0x1b6 items=4 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.368:131) : avc:  denied  { create } for  pid=1655 comm=useradd name=passwd+ scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.371:132) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.371:132) : item=1 name=(null) inode=639165 dev=fd:01 mode=file,644 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:passwd_file_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.371:132) : item=0 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.371:132) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.371:132) : arch=x86_64 syscall=rename success=yes exit=0 a0=0x7ffc01a72f50 a1=0x55d303321fc0 a2=0x7ffc01a72ec0 a3=0x100 items=2 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.371:132) : avc:  denied  { unlink } for  pid=1655 comm=useradd name=passwd dev="dm-1" ino=639123 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.371:132) : avc:  denied  { rename } for  pid=1655 comm=useradd name=passwd+ dev="dm-1" ino=639165 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.371:133) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.371:133) : arch=x86_64 syscall=fchown success=yes exit=0 a0=0x5 a1=0x0 a2=0x0 a3=0x1b6 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.371:133) : avc:  denied  { setattr } for  pid=1655 comm=useradd name=shadow- dev="dm-1" ino=639128 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.375:134) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.375:134) : item=3 name=(null) inode=639123 dev=fd:01 mode=file,000 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:shadow_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.375:134) : item=2 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.375:134) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.375:134) : item=0 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.375:134) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.375:134) : arch=x86_64 syscall=openat success=yes exit=5 a0=AT_FDCWD a1=0x7ffc01a72f50 a2=O_WRONLY|O_CREAT|O_TRUNC a3=0x1b6 items=4 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.375:134) : avc:  denied  { create } for  pid=1655 comm=useradd name=shadow+ scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.382:135) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.382:135) : item=1 name=(null) inode=639123 dev=fd:01 mode=file,000 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:shadow_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.382:135) : item=0 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.382:135) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.382:135) : arch=x86_64 syscall=rename success=yes exit=0 a0=0x7ffc01a72f50 a1=0x55d303321b60 a2=0x7ffc01a72ec0 a3=0x100 items=2 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.382:135) : avc:  denied  { unlink } for  pid=1655 comm=useradd name=shadow dev="dm-1" ino=639124 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.382:135) : avc:  denied  { rename } for  pid=1655 comm=useradd name=shadow+ dev="dm-1" ino=639123 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.396:136) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.396:136) : arch=x86_64 syscall=fchown success=yes exit=0 a0=0x5 a1=0x0 a2=0x0 a3=0x1b6 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.396:136) : avc:  denied  { setattr } for  pid=1655 comm=useradd name=subuid- dev="dm-1" ino=639166 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.402:137) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.402:137) : item=1 name=(null) inode=639122 dev=fd:01 mode=file,644 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.402:137) : item=0 name=(null) inode=634599 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:etc_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.402:137) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.402:137) : arch=x86_64 syscall=rename success=yes exit=0 a0=0x7ffc01a72f50 a1=0x55d303322ce0 a2=0x7ffc01a72ec0 a3=0x100 items=2 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.402:137) : avc:  denied  { rename } for  pid=1655 comm=useradd name=subuid+ dev="dm-1" ino=639122 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.420:138) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.420:138) : item=1 name=(null) inode=9165374 dev=fd:01 mode=dir,000 ouid=root ogid=root rdev=00:00 obj=unconfined_u:object_r:user_home_dir_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.420:138) : item=0 name=(null) inode=25808996 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:home_root_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.420:138) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.420:138) : arch=x86_64 syscall=mkdir success=yes exit=0 a0=0x7ffc01a73280 a1=0000 a2=0xfffffffffffffe98 a3=0x0 items=2 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.420:138) : avc:  denied  { create } for  pid=1655 comm=useradd name=fdouser scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.420:138) : avc:  denied  { add_name } for  pid=1655 comm=useradd name=fdouser scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.420:138) : avc:  denied  { write } for  pid=1655 comm=useradd name=home dev="dm-1" ino=25808996 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:home_root_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.420:139) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.420:139) : arch=x86_64 syscall=chown success=yes exit=0 a0=0x7ffc01a73280 a1=root a2=0x0 a3=0x0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.420:139) : avc:  denied  { setattr } for  pid=1655 comm=useradd name=fdouser dev="dm-1" ino=9165374 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.420:140) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.420:140) : arch=x86_64 syscall=chown success=yes exit=0 a0=0x55d30386bb70 a1=fdouser a2=0x3e9 a3=0x0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.420:140) : avc:  denied  { chown } for  pid=1655 comm=useradd capability=chown  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.420:141) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.420:141) : arch=x86_64 syscall=chmod success=yes exit=0 a0=0x55d30386bb70 a1=0700 a2=0x0 a3=0x7f75dfcabac0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.420:141) : avc:  denied  { fsetid } for  pid=1655 comm=useradd capability=fsetid  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.422:143) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.422:143) : item=1 name=/var/home/fdouser/.bash_logout inode=9165375 dev=fd:01 mode=file,644 ouid=root ogid=root rdev=00:00 obj=unconfined_u:object_r:user_home_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.422:143) : item=0 name=/var/home/fdouser/ inode=9165374 dev=fd:01 mode=dir,700 ouid=fdouser ogid=fdouser rdev=00:00 obj=unconfined_u:object_r:user_home_dir_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.422:143) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.422:143) : arch=x86_64 syscall=openat success=yes exit=6 a0=AT_FDCWD a1=0x55d30387d060 a2=O_WRONLY|O_CREAT|O_TRUNC a3=0x1a4 items=2 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.422:143) : avc:  denied  { write open } for  pid=1655 comm=useradd path=/var/home/fdouser/.bash_logout dev="dm-1" ino=9165375 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.422:143) : avc:  denied  { create } for  pid=1655 comm=useradd name=.bash_logout scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.422:143) : avc:  denied  { add_name } for  pid=1655 comm=useradd name=.bash_logout scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.422:143) : avc:  denied  { write } for  pid=1655 comm=useradd name=fdouser dev="dm-1" ino=9165374 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.422:143) : avc:  denied  { search } for  pid=1655 comm=useradd name=fdouser dev="dm-1" ino=9165374 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.422:143) : avc:  denied  { dac_read_search } for  pid=1655 comm=useradd capability=dac_read_search  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.422:144) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.422:144) : arch=x86_64 syscall=fchown success=yes exit=0 a0=0x6 a1=0x3e9 a2=0x3e9 a3=0x1a4 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.422:144) : avc:  denied  { setattr } for  pid=1655 comm=useradd name=.bash_logout dev="dm-1" ino=9165375 scontext=system_u:system_r:fdo_t:s0 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.427:145) : proctitle=useradd -m fdouser
>    type=PATH msg=audit(08/07/23 07:58:02.427:145) : item=1 name=/var/spool/mail/fdouser inode=639161 dev=fd:01 mode=file,000 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:mail_spool_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.427:145) : item=0 name=/var/spool/mail/ inode=639115 dev=fd:01 mode=dir,775 ouid=root ogid=mail rdev=00:00 obj=system_u:object_r:mail_spool_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.427:145) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.427:145) : arch=x86_64 syscall=openat success=yes exit=4 a0=AT_FDCWD a1=0x7ffc01a73360 a2=O_WRONLY|O_CREAT|O_EXCL|O_TRUNC a3=0x0 items=2 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.427:145) : avc:  denied  { write open } for  pid=1655 comm=useradd path=/var/spool/mail/fdouser dev="dm-1" ino=639161 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.427:145) : avc:  denied  { create } for  pid=1655 comm=useradd name=fdouser scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.427:145) : avc:  denied  { add_name } for  pid=1655 comm=useradd name=fdouser scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.427:145) : avc:  denied  { write } for  pid=1655 comm=useradd name=mail dev="dm-1" ino=639115 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.427:145) : avc:  denied  { search } for  pid=1655 comm=useradd name=mail dev="dm-1" ino=639115 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.427:146) : proctitle=useradd -m fdouser
>    type=SYSCALL msg=audit(08/07/23 07:58:02.427:146) : arch=x86_64 syscall=fchown success=yes exit=0 a0=0x4 a1=0x3e9 a2=0xc a3=0x7f75dfcabac0 items=0 ppid=1273 pid=1655 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=useradd exe=/usr/sbin/useradd subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.427:146) : avc:  denied  { setattr } for  pid=1655 comm=useradd name=fdouser dev="dm-1" ino=639161 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:mail_spool_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.431:147) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.431:147) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7fc1fbd06e17 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.431:147) : avc:  denied  { open } for  pid=1273 comm=fdo-client-linu path=/etc/passwd dev="dm-1" ino=639165 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.431:147) : avc:  denied  { read } for  pid=1273 comm=fdo-client-linu name=passwd dev="dm-1" ino=639165 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.431:148) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.431:148) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xc a1=0x7fc1fbd02f35 a2=0x7ffcb2cd58a0 a3=0x1000 items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.431:148) : avc:  denied  { getattr } for  pid=1273 comm=fdo-client-linu path=/etc/passwd dev="dm-1" ino=639165 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.431:149) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 07:58:02.431:149) : item=1 name=(null) inode=17528940 dev=fd:01 mode=dir,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:user_home_dir_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.431:149) : item=0 name=(null) inode=9165374 dev=fd:01 mode=dir,700 ouid=fdouser ogid=fdouser rdev=00:00 obj=unconfined_u:object_r:user_home_dir_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.431:149) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.431:149) : arch=x86_64 syscall=mkdir success=yes exit=0 a0=0x7ffcb2cd5b10 a1=0777 a2=0x16 a3=0xfefefefefefefeff items=2 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.431:149) : avc:  denied  { create } for  pid=1273 comm=fdo-client-linu name=.ssh scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.431:150) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.431:150) : arch=x86_64 syscall=statx success=yes exit=0 a0=0xffffff9c a1=0x7ffcb2cd5970 a2=0x0 a3=0xfff items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.431:150) : avc:  denied  { getattr } for  pid=1273 comm=fdo-client-linu path=/var/home/fdouser/.ssh dev="dm-1" ino=17528940 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.431:151) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.431:151) : arch=x86_64 syscall=chmod success=yes exit=0 a0=0x7ffcb2cd5958 a1=0700 a2=0x16 a3=0xfefefefefefefeff items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.431:151) : avc:  denied  { setattr } for  pid=1273 comm=fdo-client-linu name=.ssh dev="dm-1" ino=17528940 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.431:152) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.431:152) : arch=x86_64 syscall=statx success=no exit=ENOENT(No such file or directory) a0=0xffffff9c a1=0x7ffcb2cd5b10 a2=0x0 a3=0xfff items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.431:152) : avc:  denied  { search } for  pid=1273 comm=fdo-client-linu name=.ssh dev="dm-1" ino=17528940 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.431:153) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 07:58:02.431:153) : item=3 name=(null) inode=17528941 dev=fd:01 mode=file,644 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:user_home_dir_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.431:153) : item=2 name=(null) inode=17528940 dev=fd:01 mode=dir,700 ouid=fdouser ogid=fdouser rdev=00:00 obj=system_u:object_r:user_home_dir_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.431:153) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:58:02.431:153) : item=0 name=(null) inode=17528940 dev=fd:01 mode=dir,700 ouid=fdouser ogid=fdouser rdev=00:00 obj=system_u:object_r:user_home_dir_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:58:02.431:153) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:58:02.431:153) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7ffcb2cd5af8 a2=O_WRONLY|O_CREAT|O_TRUNC|O_CLOEXEC a3=0x1b6 items=4 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.431:153) : avc:  denied  { write open } for  pid=1273 comm=fdo-client-linu path=/var/home/fdouser/.ssh/authorized_keys dev="dm-1" ino=17528941 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.431:153) : avc:  denied  { create } for  pid=1273 comm=fdo-client-linu name=authorized_keys scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.431:153) : avc:  denied  { add_name } for  pid=1273 comm=fdo-client-linu name=authorized_keys scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:58:02.431:153) : avc:  denied  { write } for  pid=1273 comm=fdo-client-linu name=.ssh dev="dm-1" ino=17528940 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.432:154) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.432:154) : arch=x86_64 syscall=statx success=yes exit=0 a0=0xffffff9c a1=0x7ffcb2cd5970 a2=0x0 a3=0xfff items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.432:154) : avc:  denied  { getattr } for  pid=1273 comm=fdo-client-linu path=/var/home/fdouser/.ssh/authorized_keys dev="dm-1" ino=17528941 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:58:02.432:155) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:58:02.432:155) : arch=x86_64 syscall=chmod success=yes exit=0 a0=0x7ffcb2cd5958 a1=0600 a2=0x26 a3=0xfefefefefefefeff items=0 ppid=1 pid=1273 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:58:02.432:155) : avc:  denied  { setattr } for  pid=1273 comm=fdo-client-linu name=authorized_keys dev="dm-1" ino=17528941 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:user_home_dir_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.250:40) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.250:40) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffded939638 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.250:40) : avc:  denied  { open } for  pid=1168 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.250:40) : avc:  denied  { read } for  pid=1168 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.250:41) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.250:41) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x564179120c70 a3=0x7b items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.250:41) : avc:  denied  { ioctl } for  pid=1168 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.251:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.251:42) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffded937d90 a2=0x7ffded937cb0 a3=0x0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.251:42) : avc:  denied  { getattr } for  pid=1168 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.251:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.251:43) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffded937d90 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.251:43) : avc:  denied  { write } for  pid=1168 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.252:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.252:44) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7f0901dfe7c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.252:44) : avc:  denied  { open } for  pid=1168 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.252:44) : avc:  denied  { read } for  pid=1168 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.252:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.252:45) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7f0901fd2f35 a2=0x7ffded937a50 a3=0x1000 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.252:45) : avc:  denied  { getattr } for  pid=1168 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.252:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.252:46) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffded939010 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.252:46) : avc:  denied  { ipc_info } for  pid=1168 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.252:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.252:47) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffded937000 a1=0x7ffded938000 a2=0xfff a3=0x7f0901fcc3e0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.252:47) : avc:  denied  { read } for  pid=1168 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18674 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.253:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.253:48) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x564179121000 a2=0x7ffded936f70 a3=0x0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.253:48) : avc:  denied  { getattr } for  pid=1168 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.253:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.253:49) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x5641791210f0 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.253:49) : avc:  denied  { open } for  pid=1168 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.253:49) : avc:  denied  { read } for  pid=1168 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.253:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.253:50) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7ffded938c8c a3=0x1000 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.253:50) : avc:  denied  { ioctl } for  pid=1168 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.253:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.253:51) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7ffded938c60 a2=0x7f0901fcf4a4 a3=0x1000 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.253:51) : avc:  denied  { getattr } for  pid=1168 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.254:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.254:52) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7f0902743037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.254:52) : avc:  denied  { open } for  pid=1168 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.254:52) : avc:  denied  { read } for  pid=1168 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.257:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 07:59:49.257:53) : item=3 name=(null) inode=1196 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:49.257:53) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:49.257:53) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:49.257:53) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:59:49.257:53) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:59:49.257:53) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7ffded937ae0 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.257:53) : avc:  denied  { read write open } for  pid=1168 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1196 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.257:53) : avc:  denied  { create } for  pid=1168 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.257:53) : avc:  denied  { add_name } for  pid=1168 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.257:53) : avc:  denied  { write } for  pid=1168 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.258:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.258:54) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.258:54) : avc:  denied  { lock } for  pid=1168 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1196 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.258:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.258:55) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7f0901fd2f35 a2=0x7ffded937a70 a3=0x1000 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.258:55) : avc:  denied  { getattr } for  pid=1168 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1196 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.261:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 07:59:49.261:56) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffded937b60 a1=0x7ffded937b60 a2=0x7ffded937a40 a3=0x0 items=0 ppid=1 pid=1168 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.261:56) : avc:  denied  { unlink } for  pid=1168 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1196 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.261:56) : avc:  denied  { remove_name } for  pid=1168 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1196 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.261:56) : avc:  denied  { write } for  pid=1168 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.265:57) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=PATH msg=audit(08/07/23 07:59:49.265:57) : item=1 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:49.265:57) : item=0 name=/usr/bin/bash inode=8392074 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:59:49.265:57) : cwd=/
>    type=EXECVE msg=audit(08/07/23 07:59:49.265:57) : argc=9 a0=/usr/bin/bash a1=-e a2=/usr/bin/clevis a3=luks a4=pass a5=-d a6=/dev/vda4 a7=-s a8=0
>    type=SYSCALL msg=audit(08/07/23 07:59:49.265:57) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x7f09017fddc0 a1=0x564179136740 a2=0x7ffded941058 a3=0x8 items=2 ppid=1168 pid=1184 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.265:57) : avc:  denied  { map } for  pid=1184 comm=clevis path=/usr/bin/bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.265:57) : avc:  denied  { execute } for  pid=1184 comm=fdo-client-linu name=bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.265:57) : avc:  denied  { execute_no_trans } for  pid=1184 comm=fdo-client-linu path=/usr/bin/clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.265:57) : avc:  denied  { execute } for  pid=1184 comm=fdo-client-linu name=clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.269:58) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 07:59:49.269:58) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7f8c5b6cae17 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1168 pid=1184 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.269:58) : avc:  denied  { open } for  pid=1184 comm=clevis path=/etc/passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.269:58) : avc:  denied  { read } for  pid=1184 comm=clevis name=passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.270:59) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 07:59:49.270:59) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x3 a1=0x7f8c5b6c6f35 a2=0x7ffd650191b0 a3=0x1000 items=0 ppid=1168 pid=1184 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.270:59) : avc:  denied  { getattr } for  pid=1184 comm=clevis path=/etc/passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.289:60) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 07:59:49.289:60) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x55eec337a310 a2=0x7fff679207e0 a3=0x0 items=0 ppid=1184 pid=1195 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.289:60) : avc:  denied  { getattr } for  pid=1195 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.292:61) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 07:59:49.292:61) : arch=x86_64 syscall=access success=yes exit=0 a0=0x55eec337a310 a1=X_OK a2=0x7fff67920700 a3=0x0 items=0 ppid=1184 pid=1195 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.292:61) : avc:  denied  { execute } for  pid=1195 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.292:62) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 07:59:49.292:62) : arch=x86_64 syscall=access success=yes exit=0 a0=0x55eec337a310 a1=R_OK a2=0x7fff67920700 a3=0x0 items=0 ppid=1184 pid=1195 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.292:62) : avc:  denied  { read } for  pid=1195 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.293:63) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=PATH msg=audit(08/07/23 07:59:49.293:63) : item=0 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:59:49.293:63) : cwd=/
>    type=EXECVE msg=audit(08/07/23 07:59:49.293:63) : argc=5 a0=cryptsetup a1=isLuks a2=--type a3=luks1 a4=/dev/vda4
>    type=SYSCALL msg=audit(08/07/23 07:59:49.293:63) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x55eec337a310 a1=0x55eec337a480 a2=0x55eec336f4f0 a3=0x55eec337ab50 items=1 ppid=1195 pid=1198 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.293:63) : avc:  denied  { map } for  pid=1198 comm=cryptsetup path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.293:63) : avc:  denied  { execute_no_trans } for  pid=1198 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.293:63) : avc:  denied  { open } for  pid=1198 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.316:64) : proctitle=sed -rn s|^\s+([0-9]+): clevis|\1|p
>    type=EXECVE msg=audit(08/07/23 07:59:49.316:64) : argc=3 a0=sed a1=-rn a2=s|^\s+([0-9]+): clevis|\1|p
>    type=SYSCALL msg=audit(08/07/23 07:59:49.316:64) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x55eec34062c0 a1=0x55eec3407270 a2=0x55eec34072a0 a3=0x8 items=0 ppid=1206 pid=1210 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=sed exe=/usr/bin/sed subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.316:64) : avc:  denied  { map } for  pid=1210 comm=sed path=/usr/bin/sed dev="dm-1" ino=25531310 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.386:65) : proctitle=clevis-pin-tpm2 decrypt
>    type=SYSCALL msg=audit(08/07/23 07:59:49.386:65) : arch=x86_64 syscall=statx success=yes exit=0 a0=0xffffff9c a1=0x559c40384ad0 a2=0x0 a3=0xfff items=0 ppid=1220 pid=1225 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.386:65) : avc:  denied  { getattr } for  pid=1225 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.388:66) : proctitle=clevis-pin-tpm2 decrypt
>    type=SYSCALL msg=audit(08/07/23 07:59:49.388:66) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7ffc260c7a00 a2=O_RDWR|O_NONBLOCK a3=0x0 items=0 ppid=1220 pid=1225 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.388:66) : avc:  denied  { open } for  pid=1225 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.388:66) : avc:  denied  { read write } for  pid=1225 comm=clevis-pin-tpm2 name=tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:49.388:66) : avc:  denied  { dac_override } for  pid=1225 comm=clevis-pin-tpm2 capability=dac_override  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.614:70) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:49.614:70) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffdc3f60f60 items=0 ppid=1168 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.614:70) : avc:  denied  { ipc_info } for  pid=1275 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.616:71) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:49.616:71) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffdc3f5ef50 a1=0x7ffdc3f5ff50 a2=0xfff a3=0x7f83e64c13e0 items=0 ppid=1168 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.616:71) : avc:  denied  { read } for  pid=1275 comm=cryptsetup name=252:4 dev="sysfs" ino=18674 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.622:72) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:49.622:72) : arch=x86_64 syscall=openat success=yes exit=8 a0=AT_FDCWD a1=0x55c8a855ca20 a2=O_RDWR a3=0x0 items=0 ppid=1168 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.622:72) : avc:  denied  { write } for  pid=1275 comm=cryptsetup name=vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.647:73) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:49.647:73) : arch=x86_64 syscall=add_key success=yes exit=176464247 a0=0x7f83e65d822e a1=0x55c8a8598c30 a2=0x55c8a8593560 a3=0x40 items=0 ppid=1168 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.647:73) : avc:  denied  { write } for  pid=1275 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=key permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:49.648:74) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:49.648:74) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0x8 a1=0x7ffdc3f60dc0 a2=0x7f83e64c44a4 a3=0x1000 items=0 ppid=1168 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:49.648:74) : avc:  denied  { getattr } for  pid=1275 comm=cryptsetup name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.731:103) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=PATH msg=audit(08/07/23 07:59:50.731:103) : item=3 name=(null) inode=1247 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:50.731:103) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:50.731:103) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:50.731:103) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:59:50.731:103) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:59:50.731:103) : arch=x86_64 syscall=openat success=yes exit=9 a0=0xb a1=0x7ffdc3f601e0 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.731:103) : avc:  denied  { read write open } for  pid=1275 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:50.731:103) : avc:  denied  { create } for  pid=1275 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.731:104) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.731:104) : arch=x86_64 syscall=flock success=yes exit=0 a0=0x9 a1=0x2 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.731:104) : avc:  denied  { lock } for  pid=1275 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.731:105) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.731:105) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x9 a1=0x7f83e64c7f35 a2=0x7ffdc3f60170 a3=0x1000 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.731:105) : avc:  denied  { getattr } for  pid=1275 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.736:106) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.736:106) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffdc3f60290 a1=0x7ffdc3f60290 a2=0x7ffdc3f60170 a3=0x0 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.736:106) : avc:  denied  { unlink } for  pid=1275 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1247 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.769:107) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.769:107) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7f83e630c580 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.769:107) : avc:  denied  { open } for  pid=1275 comm=cryptsetup path=/sys/devices/virtual/bdi/253:2/read_ahead_kb dev="sysfs" ino=24187 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:50.769:107) : avc:  denied  { read } for  pid=1275 comm=cryptsetup name=read_ahead_kb dev="sysfs" ino=24187 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.780:109) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.780:109) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd11 a2=0x55c8a85b5bf0 a3=0x7ffdc3f5dd92 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.780:109) : avc:  denied  { module_request } for  pid=1275 comm=cryptsetup kmod="dm-integrity" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.798:110) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.798:110) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd0d a2=0x55c8a85b5bf0 a3=0x7ffdc3f5dd92 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.798:110) : avc:  denied  { ioctl } for  pid=1275 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd0d scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.799:111) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.799:111) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x55c8a85e6190 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.799:111) : avc:  denied  { open } for  pid=1275 comm=cryptsetup path=/dev/dm-3 dev="devtmpfs" ino=598 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 07:59:50.799:111) : avc:  denied  { read } for  pid=1275 comm=cryptsetup name=dm-3 dev="devtmpfs" ino=598 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.799:112) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.799:112) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0x1263 a2=0x7ffdc3f60440 a3=0x0 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.799:112) : avc:  denied  { ioctl } for  pid=1275 comm=cryptsetup path=/dev/dm-3 dev="devtmpfs" ino=598 ioctlcmd=0x1263 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:50.864:114) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:50.864:114) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x9 a1=0x7f83e64c7f35 a2=0x7ffdc3f600f0 a3=0x1000 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:50.864:114) : avc:  denied  { getattr } for  pid=1275 comm=cryptsetup path=/dev/dm-2 dev="devtmpfs" ino=588 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:51.344:117) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=PATH msg=audit(08/07/23 07:59:51.344:117) : item=3 name=(null) inode=1275 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:51.344:117) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:51.344:117) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 07:59:51.344:117) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 07:59:51.344:117) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 07:59:51.344:117) : arch=x86_64 syscall=openat success=yes exit=11 a0=0xc a1=0x7ffdc3f60460 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:51.344:117) : avc:  denied  { add_name } for  pid=1275 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 07:59:51.344:117) : avc:  denied  { write } for  pid=1275 comm=cryptsetup name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 07:59:51.377:118) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 07:59:51.377:118) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffdc3f60510 a1=0x7ffdc3f60510 a2=0x7ffdc3f603f0 a3=0x0 items=0 ppid=1 pid=1275 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 07:59:51.377:118) : avc:  denied  { remove_name } for  pid=1275 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1275 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.600:40) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.600:40) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffebf327f18 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.600:40) : avc:  denied  { open } for  pid=1164 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.600:40) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.600:41) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.600:41) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x565369c16c70 a3=0x7b items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.600:41) : avc:  denied  { ioctl } for  pid=1164 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.600:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.600:42) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffebf326670 a2=0x7ffebf326590 a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.600:42) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.601:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.601:43) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffebf326670 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.601:43) : avc:  denied  { write } for  pid=1164 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.601:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.601:44) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7f2506e587c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.601:44) : avc:  denied  { open } for  pid=1164 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.601:44) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.601:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.601:45) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7f250702cf35 a2=0x7ffebf326330 a3=0x1000 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.601:45) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.601:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.601:46) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffebf3278f0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.601:46) : avc:  denied  { ipc_info } for  pid=1164 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.601:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.601:47) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffebf3258e0 a1=0x7ffebf3268e0 a2=0xfff a3=0x7f25070263e0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.601:47) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18674 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.601:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.601:48) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x565369c17020 a2=0x7ffebf325850 a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.601:48) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=235 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.601:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.601:49) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x565369c17000 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.601:49) : avc:  denied  { open } for  pid=1164 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=235 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.601:49) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=235 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.601:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.601:50) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7ffebf32756c a3=0x1000 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.601:50) : avc:  denied  { ioctl } for  pid=1164 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=235 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.602:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.602:51) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7ffebf327540 a2=0x7f25070294a4 a3=0x1000 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.602:51) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.602:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.602:52) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7f250779d037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.602:52) : avc:  denied  { open } for  pid=1164 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.602:52) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.606:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 08:00:12.606:53) : item=3 name=(null) inode=1195 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:12.606:53) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:12.606:53) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:12.606:53) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:12.606:53) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:00:12.606:53) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7ffebf3263c0 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.606:53) : avc:  denied  { read write open } for  pid=1164 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1195 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.606:53) : avc:  denied  { create } for  pid=1164 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.606:53) : avc:  denied  { add_name } for  pid=1164 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.606:53) : avc:  denied  { write } for  pid=1164 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.606:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.606:54) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.606:54) : avc:  denied  { lock } for  pid=1164 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1195 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.606:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.606:55) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7f250702cf35 a2=0x7ffebf326350 a3=0x1000 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.606:55) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1195 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.607:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:12.607:56) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffebf326440 a1=0x7ffebf326440 a2=0x7ffebf326320 a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.607:56) : avc:  denied  { unlink } for  pid=1164 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1195 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.607:56) : avc:  denied  { remove_name } for  pid=1164 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1195 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.613:57) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=PATH msg=audit(08/07/23 08:00:12.613:57) : item=1 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:12.613:57) : item=0 name=/usr/bin/bash inode=8392074 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:12.613:57) : cwd=/
>    type=EXECVE msg=audit(08/07/23 08:00:12.613:57) : argc=9 a0=/usr/bin/bash a1=-e a2=/usr/bin/clevis a3=luks a4=pass a5=-d a6=/dev/vda4 a7=-s a8=0
>    type=SYSCALL msg=audit(08/07/23 08:00:12.613:57) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x7f2506857dc0 a1=0x565369c2d420 a2=0x7ffebf32f938 a3=0x8 items=2 ppid=1164 pid=1180 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.613:57) : avc:  denied  { map } for  pid=1180 comm=clevis path=/usr/bin/bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.613:57) : avc:  denied  { execute } for  pid=1180 comm=fdo-client-linu name=bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.613:57) : avc:  denied  { execute_no_trans } for  pid=1180 comm=fdo-client-linu path=/usr/bin/clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.613:57) : avc:  denied  { execute } for  pid=1180 comm=fdo-client-linu name=clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.620:58) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:12.620:58) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7f5400cb6e17 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1164 pid=1180 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.620:58) : avc:  denied  { open } for  pid=1180 comm=clevis path=/etc/passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.620:58) : avc:  denied  { read } for  pid=1180 comm=clevis name=passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.620:59) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:12.620:59) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x3 a1=0x7f5400cb2f35 a2=0x7fff0bd72120 a3=0x1000 items=0 ppid=1164 pid=1180 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.620:59) : avc:  denied  { getattr } for  pid=1180 comm=clevis path=/etc/passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.632:60) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:12.632:60) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x559eceda9310 a2=0x7ffe9fc6e840 a3=0x0 items=0 ppid=1180 pid=1190 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.632:60) : avc:  denied  { getattr } for  pid=1190 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.632:61) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:12.632:61) : arch=x86_64 syscall=access success=yes exit=0 a0=0x559eceda9310 a1=X_OK a2=0x7ffe9fc6e760 a3=0x0 items=0 ppid=1180 pid=1190 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.632:61) : avc:  denied  { execute } for  pid=1190 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.632:62) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:12.632:62) : arch=x86_64 syscall=access success=yes exit=0 a0=0x559eceda9310 a1=R_OK a2=0x7ffe9fc6e760 a3=0x0 items=0 ppid=1180 pid=1190 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.632:62) : avc:  denied  { read } for  pid=1190 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.633:63) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=PATH msg=audit(08/07/23 08:00:12.633:63) : item=0 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:12.633:63) : cwd=/
>    type=EXECVE msg=audit(08/07/23 08:00:12.633:63) : argc=5 a0=cryptsetup a1=isLuks a2=--type a3=luks1 a4=/dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:12.633:63) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x559eceda9310 a1=0x559eceda9480 a2=0x559eced9e4f0 a3=0x559eceda9b50 items=1 ppid=1190 pid=1191 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.633:63) : avc:  denied  { map } for  pid=1191 comm=cryptsetup path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.633:63) : avc:  denied  { execute_no_trans } for  pid=1191 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.633:63) : avc:  denied  { open } for  pid=1191 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.657:64) : proctitle=grep -E -B1 ^\s+Keyslot:\s+0$
>    type=EXECVE msg=audit(08/07/23 08:00:12.657:64) : argc=4 a0=grep a1=-E a2=-B1 a3=^\s+Keyslot:\s+0$
>    type=SYSCALL msg=audit(08/07/23 08:00:12.657:64) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x559ecee348d0 a1=0x559ecee36910 a2=0x559ecee36240 a3=0x8 items=0 ppid=1200 pid=1202 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=grep exe=/usr/bin/grep subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.657:64) : avc:  denied  { map } for  pid=1202 comm=grep path=/usr/bin/grep dev="dm-1" ino=532513 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.715:65) : proctitle=clevis-pin-tpm2 decrypt
>    type=SYSCALL msg=audit(08/07/23 08:00:12.715:65) : arch=x86_64 syscall=statx success=yes exit=0 a0=0xffffff9c a1=0x559b656ebad0 a2=0x0 a3=0xfff items=0 ppid=1215 pid=1220 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.715:65) : avc:  denied  { getattr } for  pid=1220 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.717:66) : proctitle=clevis-pin-tpm2 decrypt
>    type=SYSCALL msg=audit(08/07/23 08:00:12.717:66) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7fff164059e0 a2=O_RDWR|O_NONBLOCK a3=0x0 items=0 ppid=1215 pid=1220 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.717:66) : avc:  denied  { open } for  pid=1220 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.717:66) : avc:  denied  { read write } for  pid=1220 comm=clevis-pin-tpm2 name=tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.717:66) : avc:  denied  { dac_override } for  pid=1220 comm=clevis-pin-tpm2 capability=dac_override  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.894:68) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:12.894:68) : arch=x86_64 syscall=openat success=yes exit=4 a0=AT_FDCWD a1=0x7ff3cb036037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1180 pid=1244 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.894:68) : avc:  denied  { open } for  pid=1244 comm=cryptsetup path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.894:68) : avc:  denied  { read } for  pid=1244 comm=cryptsetup name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.895:69) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:12.895:69) : arch=x86_64 syscall=openat success=yes exit=5 a0=AT_FDCWD a1=0x559239e19720 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1180 pid=1244 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.895:69) : avc:  denied  { open } for  pid=1244 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=235 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.895:69) : avc:  denied  { read } for  pid=1244 comm=cryptsetup name=vda4 dev="devtmpfs" ino=235 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.895:70) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:12.895:70) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x5 a1=0x7ff3caf25f35 a2=0x7ffe1f5db3d0 a3=0x1000 items=0 ppid=1180 pid=1244 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.895:70) : avc:  denied  { getattr } for  pid=1244 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=235 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.895:71) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=PATH msg=audit(08/07/23 08:00:12.895:71) : item=3 name=(null) inode=1212 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:12.895:71) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:12.895:71) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:12.895:71) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:12.895:71) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:00:12.895:71) : arch=x86_64 syscall=openat success=yes exit=6 a0=0x7 a1=0x7ffe1f5db460 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1180 pid=1244 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.895:71) : avc:  denied  { read write open } for  pid=1244 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1212 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.895:71) : avc:  denied  { create } for  pid=1244 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.895:71) : avc:  denied  { add_name } for  pid=1244 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.895:71) : avc:  denied  { write } for  pid=1244 comm=cryptsetup name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.895:72) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:12.895:72) : arch=x86_64 syscall=flock success=yes exit=0 a0=0x6 a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1180 pid=1244 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.895:72) : avc:  denied  { lock } for  pid=1244 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1212 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.895:73) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:12.895:73) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x6 a1=0x7ff3caf25f35 a2=0x7ffe1f5db3f0 a3=0x1000 items=0 ppid=1180 pid=1244 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.895:73) : avc:  denied  { getattr } for  pid=1244 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1212 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.897:74) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:12.897:74) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x7 a1=0x80081272 a2=0x7ffe1f5da410 a3=0x1000 items=0 ppid=1180 pid=1244 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.897:74) : avc:  denied  { ioctl } for  pid=1244 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=235 ioctlcmd=0x1272 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.897:75) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:12.897:75) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffe1f5db4e0 a1=0x7ffe1f5db4e0 a2=0x7ffe1f5db3c0 a3=0x0 items=0 ppid=1180 pid=1244 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.897:75) : avc:  denied  { unlink } for  pid=1244 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1212 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.897:75) : avc:  denied  { remove_name } for  pid=1244 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1212 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.956:78) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:12.956:78) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffeebc34580 a2=0x7ffeebc344a0 a3=0x0 items=0 ppid=1164 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.956:78) : avc:  denied  { getattr } for  pid=1282 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.956:79) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:12.956:79) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7ffeebc34580 a2=O_RDWR a3=0x0 items=0 ppid=1164 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.956:79) : avc:  denied  { open } for  pid=1282 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:12.956:79) : avc:  denied  { read write } for  pid=1282 comm=cryptsetup name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.956:80) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:12.956:80) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd00 a2=0x560d5b5fd940 a3=0x7ffeebc33112 items=0 ppid=1164 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.956:80) : avc:  denied  { ioctl } for  pid=1282 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd00 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.956:81) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:12.956:81) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffeebc35800 items=0 ppid=1164 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.956:81) : avc:  denied  { ipc_info } for  pid=1282 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:12.966:82) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:12.966:82) : arch=x86_64 syscall=openat success=yes exit=8 a0=AT_FDCWD a1=0x560d5b601aa0 a2=O_RDWR a3=0x0 items=0 ppid=1164 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:12.966:82) : avc:  denied  { write } for  pid=1282 comm=cryptsetup name=vda4 dev="devtmpfs" ino=235 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:13.003:83) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:13.003:83) : arch=x86_64 syscall=add_key success=yes exit=34892889 a0=0x7f0240b6622e a1=0x560d5b63ed00 a2=0x560d5b639560 a3=0x40 items=0 ppid=1164 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:13.003:83) : avc:  denied  { write } for  pid=1282 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=key permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:13.003:84) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:13.003:84) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffeebc33a00 a1=0x7ffeebc34a00 a2=0xfff a3=0x7f0240a4f3e0 items=0 ppid=1164 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:13.003:84) : avc:  denied  { read } for  pid=1282 comm=cryptsetup name=252:4 dev="sysfs" ino=18674 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:14.125:113) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:14.125:113) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7f024089a580 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:14.125:113) : avc:  denied  { open } for  pid=1282 comm=cryptsetup path=/sys/devices/virtual/bdi/253:2/read_ahead_kb dev="sysfs" ino=24187 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:14.125:113) : avc:  denied  { read } for  pid=1282 comm=cryptsetup name=read_ahead_kb dev="sysfs" ino=24187 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:14.125:114) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:14.125:114) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0x9 a1=0x7ffeebc35740 a2=0x7f0240a524a4 a3=0x1000 items=0 ppid=1 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:14.125:114) : avc:  denied  { getattr } for  pid=1282 comm=cryptsetup name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:14.136:116) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:14.136:116) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd11 a2=0x560d5b65e400 a3=0x7ffeebc32632 items=0 ppid=1 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:14.136:116) : avc:  denied  { module_request } for  pid=1282 comm=cryptsetup kmod="dm-integrity" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:14.152:117) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:14.152:117) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd0d a2=0x560d5b65e400 a3=0x7ffeebc32632 items=0 ppid=1 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:14.152:117) : avc:  denied  { sys_admin } for  pid=1282 comm=cryptsetup capability=sys_admin  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:14.632:121) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=PATH msg=audit(08/07/23 08:00:14.632:121) : item=3 name=(null) inode=1274 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:14.632:121) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:14.632:121) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:14.632:121) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:14.632:121) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:00:14.632:121) : arch=x86_64 syscall=openat success=yes exit=11 a0=0xc a1=0x7ffeebc34d00 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:14.632:121) : avc:  denied  { read write open } for  pid=1282 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1274 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:14.632:121) : avc:  denied  { create } for  pid=1282 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:14.633:122) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:14.633:122) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xb a1=0x2 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:14.633:122) : avc:  denied  { lock } for  pid=1282 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1274 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:14.633:123) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:14.633:123) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7f0240a55f35 a2=0x7ffeebc34c90 a3=0x1000 items=0 ppid=1 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:14.633:123) : avc:  denied  { getattr } for  pid=1282 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1274 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:14.668:124) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:14.668:124) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffeebc34db0 a1=0x7ffeebc34db0 a2=0x7ffeebc34c90 a3=0x0 items=0 ppid=1 pid=1282 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:14.668:124) : avc:  denied  { unlink } for  pid=1282 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1274 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.532:40) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.532:40) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffc2841b5a8 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.532:40) : avc:  denied  { open } for  pid=1162 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.532:40) : avc:  denied  { read } for  pid=1162 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.532:41) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.532:41) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x55ae2ae3fc70 a3=0x7b items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.532:41) : avc:  denied  { ioctl } for  pid=1162 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.532:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.532:42) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffc28419d00 a2=0x7ffc28419c20 a3=0x0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.532:42) : avc:  denied  { getattr } for  pid=1162 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.532:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.532:43) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffc28419d00 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.532:43) : avc:  denied  { write } for  pid=1162 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.532:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.532:44) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7fda674077c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.532:44) : avc:  denied  { open } for  pid=1162 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.532:44) : avc:  denied  { read } for  pid=1162 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.532:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.532:45) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7fda675dbf35 a2=0x7ffc284199c0 a3=0x1000 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.532:45) : avc:  denied  { getattr } for  pid=1162 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.533:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.533:46) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffc2841af80 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.533:46) : avc:  denied  { ipc_info } for  pid=1162 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.533:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.533:47) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffc28418f70 a1=0x7ffc28419f70 a2=0xfff a3=0x7fda675d53e0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.533:47) : avc:  denied  { read } for  pid=1162 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18640 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.533:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.533:48) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x55ae2ae40020 a2=0x7ffc28418ee0 a3=0x0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.533:48) : avc:  denied  { getattr } for  pid=1162 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.533:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.533:49) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x55ae2ae40000 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.533:49) : avc:  denied  { open } for  pid=1162 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.533:49) : avc:  denied  { read } for  pid=1162 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.533:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.533:50) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7ffc2841abfc a3=0x1000 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.533:50) : avc:  denied  { ioctl } for  pid=1162 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=233 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.533:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.533:51) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7ffc2841abd0 a2=0x7fda675d84a4 a3=0x1000 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.533:51) : avc:  denied  { getattr } for  pid=1162 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.534:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.534:52) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7fda67d4c037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.534:52) : avc:  denied  { open } for  pid=1162 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.534:52) : avc:  denied  { read } for  pid=1162 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.535:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 08:00:35.535:53) : item=3 name=(null) inode=1198 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.535:53) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.535:53) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.535:53) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:35.535:53) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:00:35.535:53) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7ffc28419a50 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.535:53) : avc:  denied  { read write open } for  pid=1162 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1198 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.535:53) : avc:  denied  { create } for  pid=1162 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.535:53) : avc:  denied  { add_name } for  pid=1162 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.535:53) : avc:  denied  { write } for  pid=1162 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.535:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.535:54) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.535:54) : avc:  denied  { lock } for  pid=1162 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1198 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.535:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.535:55) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7fda675dbf35 a2=0x7ffc284199e0 a3=0x1000 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.535:55) : avc:  denied  { getattr } for  pid=1162 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1198 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.538:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:35.538:56) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffc28419ad0 a1=0x7ffc28419ad0 a2=0x7ffc284199b0 a3=0x0 items=0 ppid=1 pid=1162 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.538:56) : avc:  denied  { unlink } for  pid=1162 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1198 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.538:56) : avc:  denied  { remove_name } for  pid=1162 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1198 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.541:57) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=PATH msg=audit(08/07/23 08:00:35.541:57) : item=1 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.541:57) : item=0 name=/usr/bin/bash inode=8392074 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:35.541:57) : cwd=/
>    type=EXECVE msg=audit(08/07/23 08:00:35.541:57) : argc=9 a0=/usr/bin/bash a1=-e a2=/usr/bin/clevis a3=luks a4=pass a5=-d a6=/dev/vda4 a7=-s a8=0
>    type=SYSCALL msg=audit(08/07/23 08:00:35.541:57) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x7fda66e06dc0 a1=0x55ae2ae56420 a2=0x7ffc28422fc8 a3=0x8 items=2 ppid=1162 pid=1178 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.541:57) : avc:  denied  { map } for  pid=1178 comm=clevis path=/usr/bin/bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.541:57) : avc:  denied  { execute } for  pid=1178 comm=fdo-client-linu name=bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.541:57) : avc:  denied  { execute_no_trans } for  pid=1178 comm=fdo-client-linu path=/usr/bin/clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.541:57) : avc:  denied  { execute } for  pid=1178 comm=fdo-client-linu name=clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.544:58) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:35.544:58) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7f2d9a60be17 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1162 pid=1178 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.544:58) : avc:  denied  { open } for  pid=1178 comm=clevis path=/etc/passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.544:58) : avc:  denied  { read } for  pid=1178 comm=clevis name=passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.545:59) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:35.545:59) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x3 a1=0x7f2d9a607f35 a2=0x7ffff76415a0 a3=0x1000 items=0 ppid=1162 pid=1178 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.545:59) : avc:  denied  { getattr } for  pid=1178 comm=clevis path=/etc/passwd dev="dm-1" ino=17873550 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.571:60) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:35.571:60) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x55ace4532310 a2=0x7ffd65127560 a3=0x0 items=0 ppid=1178 pid=1190 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.571:60) : avc:  denied  { getattr } for  pid=1190 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.571:61) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:35.571:61) : arch=x86_64 syscall=access success=yes exit=0 a0=0x55ace4532310 a1=X_OK a2=0x7ffd65127480 a3=0x0 items=0 ppid=1178 pid=1190 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.571:61) : avc:  denied  { execute } for  pid=1190 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.571:62) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:35.571:62) : arch=x86_64 syscall=access success=yes exit=0 a0=0x55ace4532310 a1=R_OK a2=0x7ffd65127480 a3=0x0 items=0 ppid=1178 pid=1190 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.571:62) : avc:  denied  { read } for  pid=1190 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.573:63) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=PATH msg=audit(08/07/23 08:00:35.573:63) : item=0 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:35.573:63) : cwd=/
>    type=EXECVE msg=audit(08/07/23 08:00:35.573:63) : argc=5 a0=cryptsetup a1=isLuks a2=--type a3=luks1 a4=/dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:35.573:63) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x55ace4532310 a1=0x55ace4532480 a2=0x55ace45274f0 a3=0x55ace4532b50 items=1 ppid=1190 pid=1197 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.573:63) : avc:  denied  { map } for  pid=1197 comm=cryptsetup path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.573:63) : avc:  denied  { execute_no_trans } for  pid=1197 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.573:63) : avc:  denied  { open } for  pid=1197 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.599:64) : proctitle=sed -n 1p
>    type=EXECVE msg=audit(08/07/23 08:00:35.599:64) : argc=3 a0=sed a1=-n a2=1p
>    type=SYSCALL msg=audit(08/07/23 08:00:35.599:64) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x55ace45bd9d0 a1=0x55ace45bf1b0 a2=0x55ace45bf240 a3=0x8 items=0 ppid=1204 pid=1207 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=sed exe=/usr/bin/sed subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.599:64) : avc:  denied  { map } for  pid=1207 comm=sed path=/usr/bin/sed dev="dm-1" ino=25531310 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.656:65) : proctitle=clevis-pin-tpm2 decrypt
>    type=SYSCALL msg=audit(08/07/23 08:00:35.656:65) : arch=x86_64 syscall=statx success=yes exit=0 a0=0xffffff9c a1=0x55b9f413bad0 a2=0x0 a3=0xfff items=0 ppid=1215 pid=1220 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.656:65) : avc:  denied  { getattr } for  pid=1220 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.658:66) : proctitle=clevis-pin-tpm2 decrypt
>    type=SYSCALL msg=audit(08/07/23 08:00:35.658:66) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7ffdb9ffc180 a2=O_RDWR|O_NONBLOCK a3=0x0 items=0 ppid=1215 pid=1220 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.658:66) : avc:  denied  { open } for  pid=1220 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.658:66) : avc:  denied  { read write } for  pid=1220 comm=clevis-pin-tpm2 name=tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.658:66) : avc:  denied  { dac_override } for  pid=1220 comm=clevis-pin-tpm2 capability=dac_override  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.841:69) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:35.841:69) : arch=x86_64 syscall=openat success=yes exit=4 a0=AT_FDCWD a1=0x7f3931587037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1178 pid=1262 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.841:69) : avc:  denied  { open } for  pid=1262 comm=cryptsetup path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.841:69) : avc:  denied  { read } for  pid=1262 comm=cryptsetup name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.842:70) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=PATH msg=audit(08/07/23 08:00:35.842:70) : item=3 name=(null) inode=1221 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.842:70) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.842:70) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.842:70) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:35.842:70) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:00:35.842:70) : arch=x86_64 syscall=openat success=yes exit=6 a0=0x7 a1=0x7ffdab3b8a00 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1178 pid=1262 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.842:70) : avc:  denied  { read write open } for  pid=1262 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1221 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.842:70) : avc:  denied  { create } for  pid=1262 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.843:71) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:35.843:71) : arch=x86_64 syscall=flock success=yes exit=0 a0=0x6 a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1178 pid=1262 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.843:71) : avc:  denied  { lock } for  pid=1262 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1221 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.843:72) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:35.843:72) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x6 a1=0x7f3931476f35 a2=0x7ffdab3b8990 a3=0x1000 items=0 ppid=1178 pid=1262 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.843:72) : avc:  denied  { getattr } for  pid=1262 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1221 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.845:74) : proctitle=cryptsetup open --test-passphrase /dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:35.845:74) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffdab3b8a80 a1=0x7ffdab3b8a80 a2=0x7ffdab3b8960 a3=0x0 items=0 ppid=1178 pid=1262 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.845:74) : avc:  denied  { unlink } for  pid=1262 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1221 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.919:77) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.919:77) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffcd6b3f7b0 a2=0x7ffcd6b3f6d0 a3=0x0 items=0 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.919:77) : avc:  denied  { getattr } for  pid=1300 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.919:78) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.919:78) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7ffcd6b3f7b0 a2=O_RDWR a3=0x0 items=0 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.919:78) : avc:  denied  { open } for  pid=1300 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.919:78) : avc:  denied  { read write } for  pid=1300 comm=cryptsetup name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.920:79) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.920:79) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd00 a2=0x560fab122940 a3=0x7ffcd6b3e342 items=0 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.920:79) : avc:  denied  { ioctl } for  pid=1300 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd00 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.920:80) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.920:80) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x560fab126a20 a2=0x7ffcd6b3e990 a3=0x0 items=0 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.920:80) : avc:  denied  { getattr } for  pid=1300 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.920:81) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.920:81) : arch=x86_64 syscall=openat success=yes exit=4 a0=AT_FDCWD a1=0x560fab126a00 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.920:81) : avc:  denied  { open } for  pid=1300 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.920:81) : avc:  denied  { read } for  pid=1300 comm=cryptsetup name=vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.920:82) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.920:82) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x4 a1=0x1268 a2=0x7ffcd6b406ac a3=0x1000 items=0 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.920:82) : avc:  denied  { ioctl } for  pid=1300 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=233 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.932:83) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=PATH msg=audit(08/07/23 08:00:35.932:83) : item=3 name=(null) inode=1228 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.932:83) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.932:83) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:35.932:83) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:35.932:83) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:00:35.932:83) : arch=x86_64 syscall=openat success=yes exit=7 a0=0x8 a1=0x7ffcd6b3f500 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.932:83) : avc:  denied  { add_name } for  pid=1300 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:00:35.932:83) : avc:  denied  { write } for  pid=1300 comm=cryptsetup name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.935:85) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.935:85) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffcd6b3f580 a1=0x7ffcd6b3f580 a2=0x7ffcd6b3f460 a3=0x0 items=0 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.935:85) : avc:  denied  { remove_name } for  pid=1300 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1228 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.938:86) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.938:86) : arch=x86_64 syscall=openat success=yes exit=8 a0=AT_FDCWD a1=0x560fab126aa0 a2=O_RDWR a3=0x0 items=0 ppid=1162 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.938:86) : avc:  denied  { write } for  pid=1300 comm=cryptsetup name=vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:35.992:100) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:35.992:100) : arch=x86_64 syscall=add_key success=yes exit=172876511 a0=0x7f093761c22e a1=0x560fab163d00 a2=0x560fab15e560 a3=0x40 items=0 ppid=1 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:35.992:100) : avc:  denied  { write } for  pid=1300 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=key permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:37.018:114) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:37.018:114) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7f0937350580 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:37.018:114) : avc:  denied  { open } for  pid=1300 comm=cryptsetup path=/sys/devices/virtual/bdi/253:2/read_ahead_kb dev="sysfs" ino=24187 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:37.018:114) : avc:  denied  { read } for  pid=1300 comm=cryptsetup name=read_ahead_kb dev="sysfs" ino=24187 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:37.018:115) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:37.018:115) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0x9 a1=0x7ffcd6b40970 a2=0x7f09375084a4 a3=0x1000 items=0 ppid=1 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:37.018:115) : avc:  denied  { getattr } for  pid=1300 comm=cryptsetup name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:37.027:117) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:37.027:117) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd11 a2=0x560fab183400 a3=0x7ffcd6b3d862 items=0 ppid=1 pid=1300 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:37.027:117) : avc:  denied  { module_request } for  pid=1300 comm=cryptsetup kmod="dm-integrity" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.057:40) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.057:40) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffcd2b8d2a8 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.057:40) : avc:  denied  { open } for  pid=1177 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.057:40) : avc:  denied  { read } for  pid=1177 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.057:41) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.057:41) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x55618c081c70 a3=0x7b items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.057:41) : avc:  denied  { ioctl } for  pid=1177 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.057:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.057:42) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffcd2b8ba00 a2=0x7ffcd2b8b920 a3=0x0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.057:42) : avc:  denied  { getattr } for  pid=1177 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.057:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.057:43) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffcd2b8ba00 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.057:43) : avc:  denied  { write } for  pid=1177 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.057:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.057:44) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7f8e0ace67c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.057:44) : avc:  denied  { open } for  pid=1177 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.057:44) : avc:  denied  { read } for  pid=1177 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.057:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.057:45) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7f8e0aebaf35 a2=0x7ffcd2b8b6c0 a3=0x1000 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.057:45) : avc:  denied  { getattr } for  pid=1177 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.058:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.058:46) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffcd2b8cc80 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.058:46) : avc:  denied  { ipc_info } for  pid=1177 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.058:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.058:47) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffcd2b8ac70 a1=0x7ffcd2b8bc70 a2=0xfff a3=0x7f8e0aeb43e0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.058:47) : avc:  denied  { read } for  pid=1177 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18581 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.058:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.058:48) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x55618c082020 a2=0x7ffcd2b8abe0 a3=0x0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.058:48) : avc:  denied  { getattr } for  pid=1177 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.058:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.058:49) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x55618c082000 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.058:49) : avc:  denied  { open } for  pid=1177 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.058:49) : avc:  denied  { read } for  pid=1177 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.058:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.058:50) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7ffcd2b8c8fc a3=0x1000 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.058:50) : avc:  denied  { ioctl } for  pid=1177 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.058:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.058:51) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7ffcd2b8c8d0 a2=0x7f8e0aeb74a4 a3=0x1000 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.058:51) : avc:  denied  { getattr } for  pid=1177 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.059:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.059:52) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7f8e0b62b037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.059:52) : avc:  denied  { open } for  pid=1177 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.059:52) : avc:  denied  { read } for  pid=1177 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.063:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 08:00:59.063:53) : item=3 name=(null) inode=1202 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:59.063:53) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:59.063:53) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:59.063:53) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:59.063:53) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:00:59.063:53) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7ffcd2b8b750 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.063:53) : avc:  denied  { read write open } for  pid=1177 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1202 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.063:53) : avc:  denied  { create } for  pid=1177 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.063:53) : avc:  denied  { add_name } for  pid=1177 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.063:53) : avc:  denied  { write } for  pid=1177 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.064:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.064:54) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.064:54) : avc:  denied  { lock } for  pid=1177 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1202 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.064:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.064:55) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7f8e0aebaf35 a2=0x7ffcd2b8b6e0 a3=0x1000 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.064:55) : avc:  denied  { getattr } for  pid=1177 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1202 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.066:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:00:59.066:56) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffcd2b8b7d0 a1=0x7ffcd2b8b7d0 a2=0x7ffcd2b8b6b0 a3=0x0 items=0 ppid=1 pid=1177 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.066:56) : avc:  denied  { unlink } for  pid=1177 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1202 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.066:56) : avc:  denied  { remove_name } for  pid=1177 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1202 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.066:56) : avc:  denied  { write } for  pid=1177 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.068:57) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=PATH msg=audit(08/07/23 08:00:59.068:57) : item=1 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:00:59.068:57) : item=0 name=/usr/bin/bash inode=8392074 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:shell_exec_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:59.068:57) : cwd=/
>    type=EXECVE msg=audit(08/07/23 08:00:59.068:57) : argc=9 a0=/usr/bin/bash a1=-e a2=/usr/bin/clevis a3=luks a4=pass a5=-d a6=/dev/vda4 a7=-s a8=0
>    type=SYSCALL msg=audit(08/07/23 08:00:59.068:57) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x7f8e0a6e5dc0 a1=0x55618c098420 a2=0x7ffcd2b94cc8 a3=0x8 items=2 ppid=1177 pid=1187 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.068:57) : avc:  denied  { map } for  pid=1187 comm=clevis path=/usr/bin/bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.068:57) : avc:  denied  { execute } for  pid=1187 comm=fdo-client-linu name=bash dev="dm-1" ino=8392074 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:shell_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.068:57) : avc:  denied  { execute_no_trans } for  pid=1187 comm=fdo-client-linu path=/usr/bin/clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.068:57) : avc:  denied  { execute } for  pid=1187 comm=fdo-client-linu name=clevis dev="dm-1" ino=2410 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.071:58) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:59.071:58) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7febfd306e17 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1177 pid=1187 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.071:58) : avc:  denied  { open } for  pid=1187 comm=clevis path=/etc/passwd dev="dm-1" ino=639165 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.071:58) : avc:  denied  { read } for  pid=1187 comm=clevis name=passwd dev="dm-1" ino=639165 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.072:59) : proctitle=/usr/bin/bash -e /usr/bin/clevis luks pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:59.072:59) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x3 a1=0x7febfd302f35 a2=0x7ffd4d783510 a3=0x1000 items=0 ppid=1177 pid=1187 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.072:59) : avc:  denied  { getattr } for  pid=1187 comm=clevis path=/etc/passwd dev="dm-1" ino=639165 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.086:60) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:59.086:60) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x55d8d2c4d310 a2=0x7fff57502140 a3=0x0 items=0 ppid=1187 pid=1193 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.086:60) : avc:  denied  { getattr } for  pid=1193 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.086:61) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:59.086:61) : arch=x86_64 syscall=access success=yes exit=0 a0=0x55d8d2c4d310 a1=X_OK a2=0x7fff57502060 a3=0x0 items=0 ppid=1187 pid=1193 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.086:61) : avc:  denied  { execute } for  pid=1193 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.086:62) : proctitle=/usr/bin/bash -e /usr/bin/clevis-luks-pass -d /dev/vda4 -s 0
>    type=SYSCALL msg=audit(08/07/23 08:00:59.086:62) : arch=x86_64 syscall=access success=yes exit=0 a0=0x55d8d2c4d310 a1=R_OK a2=0x7fff57502060 a3=0x0 items=0 ppid=1187 pid=1193 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-luks-pas exe=/usr/bin/bash subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.086:62) : avc:  denied  { read } for  pid=1193 comm=clevis-luks-pas name=cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.086:63) : proctitle=cryptsetup isLuks --type luks1 /dev/vda4
>    type=PATH msg=audit(08/07/23 08:00:59.086:63) : item=0 name=/lib64/ld-linux-x86-64.so.2 inode=17324163 dev=fd:01 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:ld_so_t:s0 nametype=NORMAL cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:00:59.086:63) : cwd=/
>    type=EXECVE msg=audit(08/07/23 08:00:59.086:63) : argc=5 a0=cryptsetup a1=isLuks a2=--type a3=luks1 a4=/dev/vda4
>    type=SYSCALL msg=audit(08/07/23 08:00:59.086:63) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x55d8d2c4d310 a1=0x55d8d2c4d480 a2=0x55d8d2c424f0 a3=0x55d8d2c4db50 items=1 ppid=1193 pid=1195 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.086:63) : avc:  denied  { map } for  pid=1195 comm=cryptsetup path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.086:63) : avc:  denied  { execute_no_trans } for  pid=1195 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.086:63) : avc:  denied  { open } for  pid=1195 comm=clevis-luks-pas path=/usr/sbin/cryptsetup dev="dm-1" ino=3737 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_exec_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.115:64) : proctitle=sed -rn s|^\s+([0-9]+): clevis|\1|p
>    type=EXECVE msg=audit(08/07/23 08:00:59.115:64) : argc=3 a0=sed a1=-rn a2=s|^\s+([0-9]+): clevis|\1|p
>    type=SYSCALL msg=audit(08/07/23 08:00:59.115:64) : arch=x86_64 syscall=execve success=yes exit=0 a0=0x55d8d2cd92c0 a1=0x55d8d2cda270 a2=0x55d8d2cda2a0 a3=0x8 items=0 ppid=1201 pid=1205 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=sed exe=/usr/bin/sed subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.115:64) : avc:  denied  { map } for  pid=1205 comm=sed path=/usr/bin/sed dev="dm-1" ino=25531310 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:bin_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.198:65) : proctitle=clevis-pin-tpm2 decrypt
>    type=SYSCALL msg=audit(08/07/23 08:00:59.198:65) : arch=x86_64 syscall=statx success=yes exit=0 a0=0xffffff9c a1=0x55a5806bead0 a2=0x0 a3=0xfff items=0 ppid=1212 pid=1218 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.198:65) : avc:  denied  { getattr } for  pid=1218 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.200:66) : proctitle=clevis-pin-tpm2 decrypt
>    type=SYSCALL msg=audit(08/07/23 08:00:59.200:66) : arch=x86_64 syscall=openat success=yes exit=3 a0=AT_FDCWD a1=0x7fff28a39a30 a2=O_RDWR|O_NONBLOCK a3=0x0 items=0 ppid=1212 pid=1218 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=clevis-pin-tpm2 exe=/usr/bin/clevis-pin-tpm2 subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.200:66) : avc:  denied  { open } for  pid=1218 comm=clevis-pin-tpm2 path=/dev/tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.200:66) : avc:  denied  { read write } for  pid=1218 comm=clevis-pin-tpm2 name=tpmrm0 dev="devtmpfs" ino=102 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:tpm_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:00:59.200:66) : avc:  denied  { dac_override } for  pid=1218 comm=clevis-pin-tpm2 capability=dac_override  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.438:68) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:59.438:68) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7fff8ea62da0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.438:68) : avc:  denied  { ipc_info } for  pid=1379 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.439:69) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:59.439:69) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7fff8ea60d90 a1=0x7fff8ea61d90 a2=0xfff a3=0x7f9915c393e0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.439:69) : avc:  denied  { read } for  pid=1379 comm=cryptsetup name=252:4 dev="sysfs" ino=18581 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.458:71) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:59.458:71) : arch=x86_64 syscall=openat success=yes exit=8 a0=AT_FDCWD a1=0x561d64e62aa0 a2=O_RDWR a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.458:71) : avc:  denied  { write } for  pid=1379 comm=cryptsetup name=vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:00:59.498:74) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:00:59.498:74) : arch=x86_64 syscall=add_key success=yes exit=285885891 a0=0x7f9915d5022e a1=0x561d64e9fd00 a2=0x561d64e9a560 a3=0x40 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:00:59.498:74) : avc:  denied  { write } for  pid=1379 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=key permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:00.506:77) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:00.506:77) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7f9915a84580 a2=O_RDONLY a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:00.506:77) : avc:  denied  { open } for  pid=1379 comm=cryptsetup path=/sys/devices/virtual/bdi/253:2/read_ahead_kb dev="sysfs" ino=24234 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:01:00.506:77) : avc:  denied  { read } for  pid=1379 comm=cryptsetup name=read_ahead_kb dev="sysfs" ino=24234 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:00.507:78) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:00.507:78) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0x9 a1=0x7fff8ea62ce0 a2=0x7f9915c3c4a4 a3=0x1000 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:00.507:78) : avc:  denied  { getattr } for  pid=1379 comm=cryptsetup name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:00.516:80) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:00.516:80) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd11 a2=0x561d64ebf400 a3=0x7fff8ea5fbd2 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:00.516:80) : avc:  denied  { module_request } for  pid=1379 comm=cryptsetup kmod="dm-integrity" scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:03.994:90) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:03.994:90) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd0d a2=0x561d64ec1180 a3=0x7fff8ea60d42 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:03.994:90) : avc:  denied  { sys_admin } for  pid=1379 comm=cryptsetup capability=sys_admin  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:26.632:168) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:26.632:168) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x561d64e62aa0 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:26.632:168) : avc:  denied  { open } for  pid=1379 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:01:26.632:168) : avc:  denied  { read } for  pid=1379 comm=cryptsetup name=vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:26.632:169) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:26.632:169) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x9 a1=0x7f9915c3ff35 a2=0x7fff8ea62210 a3=0x1000 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:26.632:169) : avc:  denied  { getattr } for  pid=1379 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:26.632:170) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=PATH msg=audit(08/07/23 08:01:26.632:170) : item=3 name=(null) inode=1476 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:26.632:170) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:26.632:170) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:26.632:170) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:01:26.632:170) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:01:26.632:170) : arch=x86_64 syscall=openat success=yes exit=11 a0=0xc a1=0x7fff8ea622a0 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:26.632:170) : avc:  denied  { add_name } for  pid=1379 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:01:26.632:170) : avc:  denied  { write } for  pid=1379 comm=cryptsetup name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:26.651:175) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:26.651:175) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0x80081272 a2=0x7fff8ea632f0 a3=0x1000 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:26.651:175) : avc:  denied  { ioctl } for  pid=1379 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=267 ioctlcmd=0x1272 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:26.694:182) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:26.694:182) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7fff8ea62350 a1=0x7fff8ea62350 a2=0x7fff8ea62230 a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:26.694:182) : avc:  denied  { remove_name } for  pid=1379 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1476 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:27.093:201) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:27.093:201) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd0d a2=0x561d64ec1100 a3=0x7fff8ea60d42 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:27.093:201) : avc:  denied  { ioctl } for  pid=1379 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd0d scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:27.101:202) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:27.101:202) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0x9 a1=0x7fff8ea61e90 a2=0x7f9915c3c4a4 a3=0x1000 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:27.101:202) : avc:  denied  { getattr } for  pid=1379 comm=cryptsetup name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:29.139:249) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=PATH msg=audit(08/07/23 08:01:29.139:249) : item=3 name=(null) inode=1497 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:29.139:249) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:29.139:249) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:29.139:249) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:01:29.139:249) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:01:29.139:249) : arch=x86_64 syscall=openat success=yes exit=11 a0=0xc a1=0x7fff8ea622a0 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:29.139:249) : avc:  denied  { read write open } for  pid=1379 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1497 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:01:29.139:249) : avc:  denied  { create } for  pid=1379 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:29.139:250) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:29.139:250) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xb a1=0x2 a2=0x0 a3=0x1ff items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:29.139:250) : avc:  denied  { lock } for  pid=1379 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1497 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:29.139:251) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:29.139:251) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7f9915c3ff35 a2=0x7fff8ea62230 a3=0x1000 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:29.139:251) : avc:  denied  { getattr } for  pid=1379 comm=cryptsetup path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1497 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:29.171:252) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:29.171:252) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7fff8ea62350 a1=0x7fff8ea62350 a2=0x7fff8ea62230 a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:29.171:252) : avc:  denied  { unlink } for  pid=1379 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1497 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:29.544:253) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:29.544:253) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd0d a2=0x561d64ec1100 a3=0x7fff8ea60d42 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:29.544:253) : avc:  denied  { sys_admin } for  pid=1379 comm=cryptsetup capability=sys_admin  scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=capability permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:39.754:375) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:39.754:375) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x561d64e62aa0 a2=O_RDONLY a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:39.754:375) : avc:  denied  { open } for  pid=1379 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:01:39.754:375) : avc:  denied  { read } for  pid=1379 comm=cryptsetup name=vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:39.754:376) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:39.754:376) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0x9 a1=0x7f9915c3ff35 a2=0x7fff8ea632c0 a3=0x1000 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:39.754:376) : avc:  denied  { getattr } for  pid=1379 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:39.754:377) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:39.754:377) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0x80081272 a2=0x7fff8ea63380 a3=0x1000 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:39.754:377) : avc:  denied  { ioctl } for  pid=1379 comm=cryptsetup path=/dev/vda4 dev="devtmpfs" ino=267 ioctlcmd=0x1272 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:39.754:378) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=PATH msg=audit(08/07/23 08:01:39.754:378) : item=3 name=(null) inode=1570 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:39.754:378) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:39.754:378) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:01:39.754:378) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:01:39.754:378) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:01:39.754:378) : arch=x86_64 syscall=openat success=yes exit=11 a0=0xc a1=0x7fff8ea622c0 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:39.754:378) : avc:  denied  { add_name } for  pid=1379 comm=cryptsetup name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:01:39.754:378) : avc:  denied  { write } for  pid=1379 comm=cryptsetup name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:39.759:381) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:39.759:381) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7fff8ea62370 a1=0x7fff8ea62370 a2=0x7fff8ea62250 a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:39.759:381) : avc:  denied  { remove_name } for  pid=1379 comm=cryptsetup name=L_252:4 dev="tmpfs" ino=1570 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:01:39.759:382) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:01:39.759:382) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x3 a1=0xc138fd0d a2=0x561d64ec10e0 a3=0x7fff8ea60d42 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:01:39.759:382) : avc:  denied  { ioctl } for  pid=1379 comm=cryptsetup path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd0d scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:02:05.227:613) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:02:05.227:613) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x561d64e62aa0 a2=O_RDWR a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:02:05.227:613) : avc:  denied  { write } for  pid=1379 comm=cryptsetup name=vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:02:05.330:616) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:02:05.330:616) : arch=x86_64 syscall=openat success=no exit=ENOENT(No such file or directory) a0=AT_FDCWD a1=0x7fff8ea62010 a2=O_RDONLY a3=0x0 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:02:05.330:616) : avc:  denied  { read } for  pid=1379 comm=cryptsetup name=252:4 dev="sysfs" ino=18581 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:02:06.240:617) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:02:06.240:617) : arch=x86_64 syscall=keyctl success=yes exit=0 a0=0x3 a1=0x110a45c3 a2=0x7f9915ac6e5d a3=0x7fff8ea63301 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:02:06.240:617) : avc:  denied  { write } for  pid=1379 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:fdo_t:s0 tclass=key permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:02:06.240:618) : proctitle=cryptsetup reencrypt --resume-only --active-name luks-e40f9c85-64c2-4bff-83cd-92774685303f --key-file -
>    type=SYSCALL msg=audit(08/07/23 08:02:06.240:618) : arch=x86_64 syscall=keyctl success=no exit=ENOENT(No such file or directory) a0=0x9 a1=0x110a45c3 a2=0xfffffffc a3=0x561d64ea8a50 items=0 ppid=1177 pid=1379 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=cryptsetup exe=/usr/sbin/cryptsetup subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:02:06.240:618) : avc:  denied  { write } for  pid=1379 comm=cryptsetup scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=key permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.016:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.016:42) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffdc80aebd8 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.016:42) : avc:  denied  { open } for  pid=1163 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:10:53.016:42) : avc:  denied  { read } for  pid=1163 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.016:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.016:43) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x55b3dae26c70 a3=0x7b items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.016:43) : avc:  denied  { ioctl } for  pid=1163 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:44) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffdc80ad330 a2=0x7ffdc80ad250 a3=0x0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:44) : avc:  denied  { getattr } for  pid=1163 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:45) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffdc80ad330 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:45) : avc:  denied  { write } for  pid=1163 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:46) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7f82737787c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:46) : avc:  denied  { open } for  pid=1163 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:10:53.017:46) : avc:  denied  { read } for  pid=1163 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:47) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7f827394cf35 a2=0x7ffdc80acff0 a3=0x1000 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:47) : avc:  denied  { getattr } for  pid=1163 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:48) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffdc80ae5b0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:48) : avc:  denied  { ipc_info } for  pid=1163 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:49) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffdc80ac5a0 a1=0x7ffdc80ad5a0 a2=0xfff a3=0x7f82739463e0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:49) : avc:  denied  { read } for  pid=1163 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18640 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:50) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x55b3dae27000 a2=0x7ffdc80ac510 a3=0x0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:50) : avc:  denied  { getattr } for  pid=1163 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:51) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x55b3dae270c0 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:51) : avc:  denied  { open } for  pid=1163 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:10:53.017:51) : avc:  denied  { read } for  pid=1163 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=233 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:52) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7ffdc80ae22c a3=0x1000 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:52) : avc:  denied  { ioctl } for  pid=1163 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=233 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.017:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.017:53) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7ffdc80ae200 a2=0x7f82739494a4 a3=0x1000 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.017:53) : avc:  denied  { getattr } for  pid=1163 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.019:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.019:54) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7f82740bd037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.019:54) : avc:  denied  { open } for  pid=1163 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:10:53.019:54) : avc:  denied  { read } for  pid=1163 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.019:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 08:10:53.019:55) : item=3 name=(null) inode=1203 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:10:53.019:55) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:10:53.019:55) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:10:53.019:55) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:10:53.019:55) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:10:53.019:55) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7ffdc80ad080 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.019:55) : avc:  denied  { read write open } for  pid=1163 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1203 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:10:53.019:55) : avc:  denied  { create } for  pid=1163 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:10:53.019:55) : avc:  denied  { add_name } for  pid=1163 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:10:53.019:55) : avc:  denied  { write } for  pid=1163 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.020:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.020:56) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.020:56) : avc:  denied  { lock } for  pid=1163 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1203 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.020:57) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.020:57) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7f827394cf35 a2=0x7ffdc80ad010 a3=0x1000 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.020:57) : avc:  denied  { getattr } for  pid=1163 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1203 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:10:53.021:58) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:10:53.021:58) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffdc80ad100 a1=0x7ffdc80ad100 a2=0x7ffdc80acfe0 a3=0x0 items=0 ppid=1 pid=1163 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:10:53.021:58) : avc:  denied  { unlink } for  pid=1163 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1203 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:10:53.021:58) : avc:  denied  { remove_name } for  pid=1163 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1203 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.054:40) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.054:40) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffc3c597098 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.054:40) : avc:  denied  { open } for  pid=1164 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:10.054:40) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.054:41) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.054:41) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x556b70333c70 a3=0x7b items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.054:41) : avc:  denied  { ioctl } for  pid=1164 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:42) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffc3c5957f0 a2=0x7ffc3c595710 a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:42) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:43) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffc3c5957f0 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:43) : avc:  denied  { write } for  pid=1164 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:44) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7fc53acb17c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:44) : avc:  denied  { open } for  pid=1164 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:10.055:44) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:45) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7fc53ae85f35 a2=0x7ffc3c5954b0 a3=0x1000 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:45) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:46) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffc3c596a70 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:46) : avc:  denied  { ipc_info } for  pid=1164 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:47) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffc3c594a60 a1=0x7ffc3c595a60 a2=0xfff a3=0x7fc53ae7f3e0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:47) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18467 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:48) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x556b70334000 a2=0x7ffc3c5949d0 a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:48) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:49) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x556b703340c0 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:49) : avc:  denied  { open } for  pid=1164 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:10.055:49) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=267 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:50) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7ffc3c5966ec a3=0x1000 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:50) : avc:  denied  { ioctl } for  pid=1164 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=267 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.055:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.055:51) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7ffc3c5966c0 a2=0x7fc53ae824a4 a3=0x1000 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.055:51) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.056:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.056:52) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7fc53b5f6037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.056:52) : avc:  denied  { open } for  pid=1164 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:10.056:52) : avc:  denied  { read } for  pid=1164 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.058:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 08:12:10.058:53) : item=3 name=(null) inode=1204 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:10.058:53) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:10.058:53) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:10.058:53) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:12:10.058:53) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:12:10.058:53) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7ffc3c595540 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.058:53) : avc:  denied  { read write open } for  pid=1164 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1204 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:10.058:53) : avc:  denied  { create } for  pid=1164 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:10.058:53) : avc:  denied  { add_name } for  pid=1164 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:12:10.058:53) : avc:  denied  { write } for  pid=1164 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.058:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.058:54) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.058:54) : avc:  denied  { lock } for  pid=1164 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1204 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.059:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.059:55) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7fc53ae85f35 a2=0x7ffc3c5954d0 a3=0x1000 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.059:55) : avc:  denied  { getattr } for  pid=1164 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1204 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:10.063:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:10.063:56) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffc3c5955c0 a1=0x7ffc3c5955c0 a2=0x7ffc3c5954a0 a3=0x0 items=0 ppid=1 pid=1164 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:10.063:56) : avc:  denied  { unlink } for  pid=1164 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1204 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:10.063:56) : avc:  denied  { remove_name } for  pid=1164 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1204 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.455:40) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.455:40) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffe85c1fab8 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.455:40) : avc:  denied  { open } for  pid=1156 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:30.455:40) : avc:  denied  { read } for  pid=1156 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.456:41) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.456:41) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x5583b101ec70 a3=0x7b items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.456:41) : avc:  denied  { ioctl } for  pid=1156 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.456:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.456:42) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffe85c1e210 a2=0x7ffe85c1e130 a3=0x0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.456:42) : avc:  denied  { getattr } for  pid=1156 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.457:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.457:43) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffe85c1e210 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.457:43) : avc:  denied  { write } for  pid=1156 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.457:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.457:44) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7fced97a77c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.457:44) : avc:  denied  { open } for  pid=1156 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:30.457:44) : avc:  denied  { read } for  pid=1156 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.457:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.457:45) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7fced997bf35 a2=0x7ffe85c1ded0 a3=0x1000 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.457:45) : avc:  denied  { getattr } for  pid=1156 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.457:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.457:46) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffe85c1f490 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.457:46) : avc:  denied  { ipc_info } for  pid=1156 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.457:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.457:47) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffe85c1d480 a1=0x7ffe85c1e480 a2=0xfff a3=0x7fced99753e0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.457:47) : avc:  denied  { read } for  pid=1156 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18581 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.458:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.458:48) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x5583b101f000 a2=0x7ffe85c1d3f0 a3=0x0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.458:48) : avc:  denied  { getattr } for  pid=1156 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=239 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.458:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.458:49) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x5583b101f0c0 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.458:49) : avc:  denied  { open } for  pid=1156 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=239 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:30.458:49) : avc:  denied  { read } for  pid=1156 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=239 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.458:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.458:50) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7ffe85c1f10c a3=0x1000 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.458:50) : avc:  denied  { ioctl } for  pid=1156 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=239 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.458:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.458:51) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7ffe85c1f0e0 a2=0x7fced99784a4 a3=0x1000 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.458:51) : avc:  denied  { getattr } for  pid=1156 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.458:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.458:52) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7fceda0ec037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.458:52) : avc:  denied  { open } for  pid=1156 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:30.458:52) : avc:  denied  { read } for  pid=1156 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.461:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 08:12:30.461:53) : item=3 name=(null) inode=1184 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:30.461:53) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:30.461:53) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:30.461:53) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:12:30.461:53) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:12:30.461:53) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7ffe85c1df60 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.461:53) : avc:  denied  { read write open } for  pid=1156 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1184 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:30.461:53) : avc:  denied  { create } for  pid=1156 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:30.461:53) : avc:  denied  { add_name } for  pid=1156 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:12:30.461:53) : avc:  denied  { write } for  pid=1156 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.462:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.462:54) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.462:54) : avc:  denied  { lock } for  pid=1156 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1184 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.463:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.463:55) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7fced997bf35 a2=0x7ffe85c1def0 a3=0x1000 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.463:55) : avc:  denied  { getattr } for  pid=1156 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1184 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:30.466:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:30.466:56) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffe85c1dfe0 a1=0x7ffe85c1dfe0 a2=0x7ffe85c1dec0 a3=0x0 items=0 ppid=1 pid=1156 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:30.466:56) : avc:  denied  { unlink } for  pid=1156 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1184 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:30.466:56) : avc:  denied  { remove_name } for  pid=1156 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1184 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.754:41) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.754:41) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7ffe1fe4f448 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.754:41) : avc:  denied  { open } for  pid=1157 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:51.754:41) : avc:  denied  { read } for  pid=1157 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.754:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.754:42) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x55bb7df68c70 a3=0x7b items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.754:42) : avc:  denied  { ioctl } for  pid=1157 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.754:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.754:43) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7ffe1fe4dba0 a2=0x7ffe1fe4dac0 a3=0x0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.754:43) : avc:  denied  { getattr } for  pid=1157 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:44) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7ffe1fe4dba0 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:44) : avc:  denied  { write } for  pid=1157 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:45) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7f1455dcc7c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:45) : avc:  denied  { open } for  pid=1157 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:51.755:45) : avc:  denied  { read } for  pid=1157 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:46) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7f1455fa0f35 a2=0x7ffe1fe4d860 a3=0x1000 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:46) : avc:  denied  { getattr } for  pid=1157 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:47) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7ffe1fe4ee20 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:47) : avc:  denied  { ipc_info } for  pid=1157 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:48) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7ffe1fe4ce10 a1=0x7ffe1fe4de10 a2=0xfff a3=0x7f1455f9a3e0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:48) : avc:  denied  { read } for  pid=1157 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18483 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:49) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x55bb7df69000 a2=0x7ffe1fe4cd80 a3=0x0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:49) : avc:  denied  { getattr } for  pid=1157 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=236 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:50) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x55bb7df690c0 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:50) : avc:  denied  { open } for  pid=1157 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=236 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:51.755:50) : avc:  denied  { read } for  pid=1157 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=236 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:51) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7ffe1fe4ea9c a3=0x1000 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:51) : avc:  denied  { ioctl } for  pid=1157 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=236 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.755:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.755:52) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7ffe1fe4ea70 a2=0x7f1455f9d4a4 a3=0x1000 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.755:52) : avc:  denied  { getattr } for  pid=1157 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.756:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.756:53) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7f1456711037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.756:53) : avc:  denied  { open } for  pid=1157 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:51.756:53) : avc:  denied  { read } for  pid=1157 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.757:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 08:12:51.757:54) : item=3 name=(null) inode=1181 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:51.757:54) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:51.757:54) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:12:51.757:54) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:12:51.757:54) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:12:51.757:54) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7ffe1fe4d8f0 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.757:54) : avc:  denied  { read write open } for  pid=1157 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1181 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:51.757:54) : avc:  denied  { create } for  pid=1157 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:51.757:54) : avc:  denied  { add_name } for  pid=1157 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:12:51.757:54) : avc:  denied  { write } for  pid=1157 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.757:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.757:55) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.757:55) : avc:  denied  { lock } for  pid=1157 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1181 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.757:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.757:56) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7f1455fa0f35 a2=0x7ffe1fe4d880 a3=0x1000 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.757:56) : avc:  denied  { getattr } for  pid=1157 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1181 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:12:51.760:57) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:12:51.760:57) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7ffe1fe4d970 a1=0x7ffe1fe4d970 a2=0x7ffe1fe4d850 a3=0x0 items=0 ppid=1 pid=1157 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:12:51.760:57) : avc:  denied  { unlink } for  pid=1157 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1181 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:12:51.760:57) : avc:  denied  { remove_name } for  pid=1157 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1181 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.256:41) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.256:41) : arch=x86_64 syscall=openat success=yes exit=9 a0=AT_FDCWD a1=0x7fffa44d6108 a2=O_RDONLY|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.256:41) : avc:  denied  { open } for  pid=1175 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:13:13.256:41) : avc:  denied  { read } for  pid=1175 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.256:42) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.256:42) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0x9 a1=0xc138fd02 a2=0x564a331d9c70 a3=0x7b items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.256:42) : avc:  denied  { ioctl } for  pid=1175 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 ioctlcmd=0xfd02 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.256:43) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.256:43) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x7fffa44d4860 a2=0x7fffa44d4780 a3=0x0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.256:43) : avc:  denied  { getattr } for  pid=1175 comm=fdo-client-linu path=/dev/mapper/control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.256:44) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.256:44) : arch=x86_64 syscall=openat success=yes exit=10 a0=AT_FDCWD a1=0x7fffa44d4860 a2=O_RDWR a3=0x0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.256:44) : avc:  denied  { write } for  pid=1175 comm=fdo-client-linu name=control dev="devtmpfs" ino=139 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:lvm_control_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.256:45) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.256:45) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x7f260cf017c2 a2=O_RDONLY a3=0x0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.256:45) : avc:  denied  { open } for  pid=1175 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:13:13.256:45) : avc:  denied  { read } for  pid=1175 comm=fdo-client-linu name=devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.257:46) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.257:46) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xb a1=0x7f260d0d5f35 a2=0x7fffa44d4520 a3=0x1000 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.257:46) : avc:  denied  { getattr } for  pid=1175 comm=fdo-client-linu path=/proc/devices dev="proc" ino=4026532021 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.257:47) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.257:47) : arch=x86_64 syscall=semctl success=yes exit=0 a0=0x0 a1=0x0 a2=0x13 a3=0x7fffa44d5ae0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.257:47) : avc:  denied  { ipc_info } for  pid=1175 comm=fdo-client-linu scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=system permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.257:48) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.257:48) : arch=x86_64 syscall=readlink success=yes exit=73 a0=0x7fffa44d3ad0 a1=0x7fffa44d4ad0 a2=0xfff a3=0x7f260d0cf3e0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.257:48) : avc:  denied  { read } for  pid=1175 comm=fdo-client-linu name=252:4 dev="sysfs" ino=18501 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.257:49) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.257:49) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=AT_FDCWD a1=0x564a331da000 a2=0x7fffa44d3a40 a3=0x0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.257:49) : avc:  denied  { getattr } for  pid=1175 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=266 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.257:50) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.257:50) : arch=x86_64 syscall=openat success=yes exit=11 a0=AT_FDCWD a1=0x564a331da0c0 a2=O_RDONLY|O_DIRECT a3=0x0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.257:50) : avc:  denied  { open } for  pid=1175 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=266 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    type=AVC msg=audit(08/07/23 08:13:13.257:50) : avc:  denied  { read } for  pid=1175 comm=fdo-client-linu name=vda4 dev="devtmpfs" ino=266 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.257:51) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.257:51) : arch=x86_64 syscall=ioctl success=yes exit=0 a0=0xb a1=0x1268 a2=0x7fffa44d575c a3=0x1000 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.257:51) : avc:  denied  { ioctl } for  pid=1175 comm=fdo-client-linu path=/dev/vda4 dev="devtmpfs" ino=266 ioctlcmd=0x1268 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.257:52) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.257:52) : arch=x86_64 syscall=fstatfs success=yes exit=0 a0=0xb a1=0x7fffa44d5730 a2=0x7f260d0d24a4 a3=0x1000 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.257:52) : avc:  denied  { getattr } for  pid=1175 comm=fdo-client-linu name=/ dev="devtmpfs" ino=1 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=filesystem permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.258:53) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.258:53) : arch=x86_64 syscall=openat success=yes exit=12 a0=AT_FDCWD a1=0x7f260d846037 a2=O_RDONLY|O_NONBLOCK|O_CLOEXEC a3=0x0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.258:53) : avc:  denied  { open } for  pid=1175 comm=fdo-client-linu path=/dev/random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    type=AVC msg=audit(08/07/23 08:13:13.258:53) : avc:  denied  { read } for  pid=1175 comm=fdo-client-linu name=random dev="devtmpfs" ino=8 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:random_device_t:s0 tclass=chr_file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.259:54) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=PATH msg=audit(08/07/23 08:13:13.259:54) : item=3 name=(null) inode=1192 dev=00:18 mode=file,755 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:13:13.259:54) : item=2 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:13:13.259:54) : item=1 name=(null) nametype=CREATE cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=PATH msg=audit(08/07/23 08:13:13.259:54) : item=0 name=(null) inode=93 dev=00:18 mode=dir,700 ouid=root ogid=root rdev=00:00 obj=system_u:object_r:var_run_t:s0 nametype=PARENT cap_fp=none cap_fi=none cap_fe=0 cap_fver=0 cap_frootid=0
>    type=CWD msg=audit(08/07/23 08:13:13.259:54) : cwd=/
>    type=SYSCALL msg=audit(08/07/23 08:13:13.259:54) : arch=x86_64 syscall=openat success=yes exit=14 a0=0xf a1=0x7fffa44d45b0 a2=O_RDWR|O_CREAT|O_NOFOLLOW|O_CLOEXEC a3=0x1ff items=4 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.259:54) : avc:  denied  { read write open } for  pid=1175 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1192 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:13:13.259:54) : avc:  denied  { create } for  pid=1175 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:13:13.259:54) : avc:  denied  { add_name } for  pid=1175 comm=fdo-client-linu name=L_252:4 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    type=AVC msg=audit(08/07/23 08:13:13.259:54) : avc:  denied  { write } for  pid=1175 comm=fdo-client-linu name=cryptsetup dev="tmpfs" ino=93 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.259:55) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.259:55) : arch=x86_64 syscall=flock success=yes exit=0 a0=0xe a1=0x1 a2=0x0 a3=0x1ff items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.259:55) : avc:  denied  { lock } for  pid=1175 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1192 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.259:56) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.259:56) : arch=x86_64 syscall=newfstatat success=yes exit=0 a0=0xe a1=0x7f260d0d5f35 a2=0x7fffa44d4540 a3=0x1000 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.259:56) : avc:  denied  { getattr } for  pid=1175 comm=fdo-client-linu path=/run/cryptsetup/L_252:4 dev="tmpfs" ino=1192 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    ----
>    type=PROCTITLE msg=audit(08/07/23 08:13:13.262:57) : proctitle=/usr/libexec/fdo/fdo-client-linuxapp
>    type=SYSCALL msg=audit(08/07/23 08:13:13.262:57) : arch=x86_64 syscall=unlink success=yes exit=0 a0=0x7fffa44d4630 a1=0x7fffa44d4630 a2=0x7fffa44d4510 a3=0x0 items=0 ppid=1 pid=1175 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=fdo-client-linu exe=/usr/libexec/fdo/fdo-client-linuxapp subj=system_u:system_r:fdo_t:s0 key=(null)
>    type=AVC msg=audit(08/07/23 08:13:13.262:57) : avc:  denied  { unlink } for  pid=1175 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1192 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file permissive=1
>    type=AVC msg=audit(08/07/23 08:13:13.262:57) : avc:  denied  { remove_name } for  pid=1175 comm=fdo-client-linu name=L_252:4 dev="tmpfs" ino=1192 scontext=system_u:system_r:fdo_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1

Actions: View

Attachments on bug 2229722: 1982118