Attachment 275641 Details for Bug 401211 – audit log

audit log

avc.log (text/plain), 5.14 KB, created by Jan Safranek on 2007-12-03 12:29:23 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jan Safranek

Created: 2007-12-03 12:29:23 UTC

Size: 5.14 KB

patch

obsolete

>type=AVC msg=audit(1196680992.158:45): avc:  denied  { search } for  pid=2354 comm="snmptrapd" name="tmp" dev=hda2 ino=553793 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1196680992.158:45): avc:  denied  { write } for  pid=2354 comm="snmptrapd" name="tmp" dev=hda2 ino=553793 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1196680992.158:45): avc:  denied  { add_name } for  pid=2354 comm="snmptrapd" name="snmpdC7SV11" scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1196680992.158:45): avc:  denied  { create } for  pid=2354 comm="snmptrapd" name="snmpdC7SV11" scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1196680992.158:45): arch=c000003e syscall=2 success=yes exit=10 a0=2aaaab461c00 a1=c2 a2=180 a3=4753e720 items=0 ppid=1 pid=2354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmptrapd" exe="/usr/sbin/snmptrapd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1196680992.159:46): avc:  denied  { write } for  pid=2354 comm="snmptrapd" name="snmpdC7SV11" dev=hda2 ino=553795 scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1196680992.159:46): arch=c000003e syscall=2 success=yes exit=10 a0=2aaaab461c00 a1=241 a2=1b6 a3=241 items=0 ppid=1 pid=2354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmptrapd" exe="/usr/sbin/snmptrapd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1196680992.160:47): avc:  denied  { getattr } for  pid=2354 comm="snmptrapd" path="/tmp/snmpdC7SV11" dev=hda2 ino=553795 scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1196680992.160:47): arch=c000003e syscall=5 success=yes exit=0 a0=a a1=7fff2e62b230 a2=7fff2e62b230 a3=0 items=0 ppid=1 pid=2354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmptrapd" exe="/usr/sbin/snmptrapd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1196680992.184:48): avc:  denied  { read } for  pid=2366 comm="sh" name="snmpdC7SV11" dev=hda2 ino=553795 scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1196680992.184:48): arch=c000003e syscall=2 success=yes exit=8 a0=1bd9a740 a1=0 a2=1b6 a3=6d items=0 ppid=2365 pid=2366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="sh" exe="/bin/bash" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1196680992.185:49): avc:  denied  { execute } for  pid=2366 comm="sh" name="traphandler.pl" dev=hda2 ino=553820 scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=AVC msg=audit(1196680992.185:49): avc:  denied  { execute_no_trans } for  pid=2366 comm="sh" path="/tmp/traphandler.pl" dev=hda2 ino=553820 scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1196680992.185:49): arch=c000003e syscall=59 success=yes exit=0 a0=1bd9a8a0 a1=1bd9b010 a2=1bd9aa80 a3=8 items=0 ppid=2365 pid=2366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="traphandler.pl" exe="/usr/bin/perl" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1196680992.440:50): avc:  denied  { ioctl } for  pid=2366 comm="traphandler.pl" path="/tmp/snmpdC7SV11" dev=hda2 ino=553795 scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1196680992.440:50): arch=c000003e syscall=16 success=no exit=-25 a0=0 a1=5401 a2=7fff47990e40 a3=0 items=0 ppid=2365 pid=2366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="traphandler.pl" exe="/usr/bin/perl" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1196680992.552:51): avc:  denied  { append } for  pid=2366 comm="traphandler.pl" name="traphandler.out" dev=hda2 ino=553878 scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1196680992.552:51): arch=c000003e syscall=2 success=yes exit=8 a0=f2e6cd0 a1=441 a2=1b6 a3=31d74f33d0 items=0 ppid=2365 pid=2366 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="traphandler.pl" exe="/usr/bin/perl" subj=user_u:system_r:snmpd_t:s0 key=(null)
>type=AVC msg=audit(1196680992.589:52): avc:  denied  { remove_name } for  pid=2354 comm="snmptrapd" name="snmpdC7SV11" dev=hda2 ino=553795 scontext=user_u:system_r:snmpd_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1196680992.589:52): avc:  denied  { unlink } for  pid=2354 comm="snmptrapd" name="snmpdC7SV11" dev=hda2 ino=553795 scontext=user_u:system_r:snmpd_t:s0 tcontext=user_u:object_r:tmp_t:s0 tclass=file
>type=SYSCALL msg=audit(1196680992.589:52): arch=c000003e syscall=87 success=yes exit=0 a0=2aaaab461c00 a1=7fff2e62b270 a2=0 a3=0 items=0 ppid=1 pid=2354 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) comm="snmptrapd" exe="/usr/sbin/snmptrapd" subj=user_u:system_r:snmpd_t:s0 key=(null)
>

Actions: View

Attachments on bug 401211: 275641