Attachment 290295 Details for Bug 426595 – AVCs and SELINUX_ERR input to 'audit2allow -M'

AVCs and SELINUX_ERR input to 'audit2allow -M'

log2 (text/plain), 8.67 KB, created by Tom London on 2007-12-22 18:34:51 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tom London

Created: 2007-12-22 18:34:51 UTC

Size: 8.67 KB

patch

obsolete

>type=SELINUX_ERR msg=audit(1198346356.729:34): security_compute_sid:  invalid context unconfined_u:unconfined_r:depmod_t:s0 for scontext=unconfined_u:unconfined_r:rpm_script_t:s0 tcontext=system_u:object_r:depmod_exec_t:s0 tclass=process
>type=SYSCALL msg=audit(1198346356.729:34): arch=40000003 syscall=11 success=yes exit=0 a0=a105d40 a1=a0f7cd8 a2=a0f7e58 a3=0 items=0 ppid=4062 pid=4070 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 comm="depmod" exe="/sbin/depmod" subj=unconfined_u:unconfined_r:depmod_t:s0 key=(null)
>
>Dec 22 10:09:10 localhost kernel: audit(1198346942.523:3): avc:  denied  { read } for  pid=1788 comm="mount" name="/" dev=usbfs ino=252 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:usbfs_t:s0 tclass=dir
>Dec 22 10:09:10 localhost kernel: audit(1198346942.523:4): avc:  denied  { ioctl } for  pid=1788 comm="mount" path="/proc/bus/usb" dev=usbfs ino=252 scontext=system_u:system_r:mount_t:s0 tcontext=system_u:object_r:usbfs_t:s0 tclass=dir
>Dec 22 10:10:42 localhost dbus: avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=2891 scontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0 tclass=dbus
>Dec 22 10:10:42 localhost dbus: avc:  denied  { acquire_svc } for service=org.gnome.Rhythmbox spid=2891 scontext=unconfined_u:unconfined_r:unconfined_execmem_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0 tclass=dbus
>Dec 22 10:11:27 localhost dbus: avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus member=Hello dest=org.freedesktop.DBus spid=3124 scontext=unconfined_u:unconfined_r:mono_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0 tclass=dbus
>Dec 22 10:11:27 localhost dbus: avc:  denied  { acquire_svc } for service=org.gnome.Tomboy spid=3124 scontext=unconfined_u:unconfined_r:mono_t:s0 tcontext=unconfined_u:unconfined_r:unconfined_dbusd_t:s0 tclass=dbus
>type=DAEMON_START msg=audit(1198346949.456:2329): auditd start, ver=1.6.2, format=raw, auid=4294967295 pid=2188 res=success, auditd pid=2188
>type=CONFIG_CHANGE msg=audit(1198346949.557:6): audit_enabled=1 old=0 by auid=4294967295 subj=system_u:system_r:auditd_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198346949.557:7): audit_enabled=1 old=0 by auid=4294967295 res=1
>type=CONFIG_CHANGE msg=audit(1198346949.610:8): audit_backlog_limit=320 old=64 by auid=4294967295 subj=system_u:system_r:auditctl_t:s0 res=1
>type=CONFIG_CHANGE msg=audit(1198346949.610:9): audit_backlog_limit=320 old=64 by auid=4294967295 res=1
>type=LABEL_LEVEL_CHANGE msg=audit(1198346957.057:10): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Cups-PDF uri=cups-pdf:/ banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198346957.215:11): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=HP4250 uri=hp:/net/hp_LaserJet_4250?ip=10.10.2.42 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198346957.368:12): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=HP5MP uri=hp:/par/HP_LaserJet_5MP?device=/dev/parport0 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198346957.557:13): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp_laserjet_1300 uri=hp:/usb/hp_LaserJet_1300?serial=00CNCB954325 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198346957.663:14): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=hp_LaserJet_1300_USB_1 uri=usb://HP/LaserJet%201300 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198346957.791:15): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Kyocera_FS-C5030N_on_dc1 uri=socket://10.10.3.49:9100 banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198346957.981:16): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=SavinColor uri=ipp://10.10.3.47/ipp/ banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198346958.174:17): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Innopath uri=file:/dev/null banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=LABEL_LEVEL_CHANGE msg=audit(1198346958.175:18): user pid=2276 uid=0 auid=4294967295 subj=system_u:system_r:cupsd_t:s0-s0:c0.c1023 msg='printer=Local uri=file:/dev/null banners=none,none range=unknown: exe="/usr/sbin/cupsd" (hostname=localhost.localdomain, addr=127.0.0.1, terminal=? res=success)'
>type=AVC msg=audit(1198346978.418:19): avc:  denied  { search } for  pid=2619 comm="dbus-daemon" name="gdm" dev=dm-0 ino=67073 scontext=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:xdm_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1198346978.418:19): arch=40000003 syscall=5 success=no exit=-2 a0=b8667658 a1=98800 a2=0 a3=0 items=0 ppid=2618 pid=2619 auid=4294967295 uid=42 gid=42 euid=42 suid=42 fsuid=42 egid=42 sgid=42 fsgid=42 tty=(none) comm="dbus-daemon" exe="/bin/dbus-daemon" subj=system_u:system_r:xdm_dbusd_t:s0-s0:c0.c1023 key=(null)
>type=USER_AUTH msg=audit(1198346999.404:20): user pid=2675 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=tbl exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1198347010.878:21): user pid=2696 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=tbl exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=failed)'
>type=USER_AUTH msg=audit(1198347022.524:22): user pid=2707 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:authentication acct=tbl exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_ACCT msg=audit(1198347022.572:23): user pid=2707 uid=0 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:accounting acct=tbl exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=CRED_ACQ msg=audit(1198347022.611:24): user pid=2707 uid=500 auid=4294967295 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:setcred acct=tbl exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=LOGIN msg=audit(1198347022.686:25): login pid=2707 uid=500 old auid=4294967295 new auid=500
>type=USER_ROLE_CHANGE msg=audit(1198347022.759:26): user pid=2707 uid=500 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='pam: default-context=unconfined_u:unconfined_r:unconfined_t:s0 selected-context=unconfined_u:unconfined_r:unconfined_t:s0: exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=? res=success)'
>type=USER_START msg=audit(1198347022.983:27): user pid=2707 uid=500 auid=500 subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct=tbl exe="/usr/libexec/gdm-session-worker" (hostname=?, addr=?, terminal=:0 res=success)'
>type=USER_AUTH msg=audit(1198347091.699:28): user pid=3155 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:authentication acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_ACCT msg=audit(1198347091.707:29): user pid=3155 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:accounting acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=USER_START msg=audit(1198347092.378:30): user pid=3155 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:session_open acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'
>type=CRED_ACQ msg=audit(1198347092.379:31): user pid=3155 uid=500 auid=500 subj=unconfined_u:unconfined_r:unconfined_t:s0 msg='op=PAM:setcred acct=root exe="/bin/su" (hostname=?, addr=?, terminal=pts/0 res=success)'

Actions: View

Attachments on bug 426595: 290295