Attachment 218461 Details for Bug 320461 – Messages in audit log

Messages in audit log

dovecot (text/plain), 6.39 KB, created by Leonid Zeitlin on 2007-10-06 15:40:44 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Leonid Zeitlin

Created: 2007-10-06 15:40:44 UTC

Size: 6.39 KB

patch

obsolete

>type=AVC msg=audit(1191684597.463:388422): avc:  denied  { search } for  pid=11209 comm="dovecot-auth" name="selinux" dev=dm-3 ino=66421910 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:selinux_config_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191684597.463:388422): arch=40000003 syscall=5 success=no exit=-13 a0=4f6513f6 a1=8000 a2=1b6 a3=9cc7148 items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388423): avc:  denied  { getattr } for  pid=11209 comm="dovecot-auth" name="/" dev=selinuxfs ino=522 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=filesystem
>type=SYSCALL msg=audit(1191684597.463:388423): arch=40000003 syscall=268 success=no exit=-13 a0=4f650ce5 a1=54 a2=bff4d190 a3=bff4d190 items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388424): avc:  denied  { search } for  pid=11209 comm="dovecot-auth" name="/" dev=selinuxfs ino=522 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:security_t:s0 tclass=dir
>type=SYSCALL msg=audit(1191684597.463:388424): arch=40000003 syscall=5 success=no exit=-13 a0=bff4c124 a1=8000 a2=0 a3=8000 items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388425): avc:  denied  { name_bind } for  pid=11209 comm="dovecot-auth" src=844 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1191684597.463:388425): arch=40000003 syscall=102 success=no exit=-13 a0=2 a1=bff4dd08 a2=4f58eff4 a3=bff4dd1c items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388426): avc:  denied  { read } for  pid=11209 comm="dovecot-auth" name="shadow" dev=dm-3 ino=66422708 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1191684597.463:388426): arch=40000003 syscall=5 success=no exit=-13 a0=118374 a1=0 a2=1b6 a3=9cca150 items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388427): avc:  denied  { name_bind } for  pid=11209 comm="dovecot-auth" src=845 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1191684597.463:388427): arch=40000003 syscall=102 success=no exit=-13 a0=2 a1=bff4dd2c a2=4f58eff4 a3=bff4dd40 items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388428): avc:  denied  { name_bind } for  pid=11209 comm="dovecot-auth" src=846 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1191684597.463:388428): arch=40000003 syscall=102 success=no exit=-13 a0=2 a1=bff4dc88 a2=4f58eff4 a3=bff4dc9c items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388429): avc:  denied  { read } for  pid=11209 comm="dovecot-auth" name="shadow" dev=dm-3 ino=66422708 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:shadow_t:s0 tclass=file
>type=SYSCALL msg=audit(1191684597.463:388429): arch=40000003 syscall=5 success=no exit=-13 a0=118374 a1=0 a2=1b6 a3=9cca2f0 items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388430): avc:  denied  { name_bind } for  pid=11209 comm="dovecot-auth" src=847 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:dhcpd_port_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1191684597.463:388430): arch=40000003 syscall=102 success=no exit=-13 a0=2 a1=bff4dcac a2=4f58eff4 a3=bff4dcc0 items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=AVC msg=audit(1191684597.463:388431): avc:  denied  { siginh } for  pid=11210 comm="unix_chkpwd" scontext=root:system_r:dovecot_auth_t:s0 tcontext=root:system_r:system_chkpwd_t:s0 tclass=process
>type=AVC msg=audit(1191684597.463:388431): avc:  denied  { rlimitinh } for  pid=11210 comm="unix_chkpwd" scontext=root:system_r:dovecot_auth_t:s0 tcontext=root:system_r:system_chkpwd_t:s0 tclass=process
>type=AVC msg=audit(1191684597.463:388431): avc:  denied  { noatsecure } for  pid=11210 comm="unix_chkpwd" scontext=root:system_r:dovecot_auth_t:s0 tcontext=root:system_r:system_chkpwd_t:s0 tclass=process
>type=AVC msg=audit(1191684597.463:388435): avc:  denied  { name_bind } for  pid=11209 comm="dovecot-auth" src=848 scontext=root:system_r:dovecot_auth_t:s0 tcontext=system_u:object_r:hi_reserved_port_t:s0 tclass=udp_socket
>type=SYSCALL msg=audit(1191684597.463:388435): arch=40000003 syscall=102 success=no exit=-13 a0=2 a1=bff4d4f8 a2=4f58eff4 a3=bff4d50c items=0 ppid=12533 pid=11209 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="dovecot-auth" exe="/usr/libexec/dovecot/dovecot-auth" subj=root:system_r:dovecot_auth_t:s0 key=(null)
>type=USER_AUTH msg=audit(1191684598.963:388436): user pid=11209 uid=0 auid=0 subj=root:system_r:dovecot_auth_t:s0 msg='PAM: authentication acct=lz : exe="/usr/libexec/dovecot/dovecot-auth" (hostname=192.168.1.72, addr=192.168.1.72, terminal=dovecot res=failed)'

Actions: View

Attachments on bug 320461: 218461