Attachment 307150 Details for Bug 449032 – grep -i dnsmasq audit.log

grep -i dnsmasq audit.log

audit.log (text/plain), 12.57 KB, created by Bill C. Riemers on 2008-05-29 22:56:32 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Bill C. Riemers

Created: 2008-05-29 22:56:32 UTC

Size: 12.57 KB

patch

obsolete

>type=AVC msg=audit(1212096704.863:3452): avc:  denied  { write } for  pid=8124 comm="dnsmasq" name="misc" dev=dm-4 ino=40781 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:system_crond_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212096704.863:3452): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8123 pid=8124 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212096704.879:3453): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8124 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212096764.674:3466): avc:  denied  { dac_override } for  pid=8147 comm="dnsmasq" capability=1 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability
>type=SYSCALL msg=audit(1212096764.674:3466): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8146 pid=8147 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212096764.675:3467): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8147 comm="dnsmasq" sig=11
>type=USER_CMD msg=audit(1212096861.214:3471): user pid=8160 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/etc/vpnc" cmd="/usr/sbin/dnsmasq" (terminal=pts/1 res=success)'
>type=AVC msg=audit(1212096888.460:3484): avc:  denied  { dac_override } for  pid=8200 comm="dnsmasq" capability=1 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability
>type=SYSCALL msg=audit(1212096888.460:3484): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8199 pid=8200 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212096888.460:3485): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8200 comm="dnsmasq" sig=11
>type=USER_CMD msg=audit(1212096926.654:3493): user pid=8223 uid=0 auid=500 subj=system_u:system_r:unconfined_t:s0 msg='cwd="/etc/vpnc" cmd="/usr/sbin/dnsmasq" (terminal=pts/1 res=success)'
>type=AVC msg=audit(1212096959.289:3506): avc:  denied  { dac_override } for  pid=8244 comm="dnsmasq" capability=1 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability
>type=SYSCALL msg=audit(1212096959.289:3506): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8243 pid=8244 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212096959.289:3507): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8244 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212097047.079:3520): avc:  denied  { dac_override } for  pid=8282 comm="dnsmasq" capability=1 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability
>type=SYSCALL msg=audit(1212097047.079:3520): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8281 pid=8282 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212097047.080:3521): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8282 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212097173.012:3554): avc:  denied  { dac_override } for  pid=8340 comm="dnsmasq" capability=1 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability
>type=SYSCALL msg=audit(1212097173.012:3554): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8339 pid=8340 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212097173.013:3555): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8340 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212097178.440:3564): avc:  denied  { dac_override } for  pid=8371 comm="dnsmasq" capability=1 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability
>type=SYSCALL msg=audit(1212097178.440:3564): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8370 pid=8371 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212097178.441:3565): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8371 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212097252.546:3586): avc:  denied  { dac_override } for  pid=8412 comm="dnsmasq" capability=1 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability
>type=SYSCALL msg=audit(1212097252.546:3586): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8411 pid=8412 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212097252.546:3587): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8412 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212097294.449:3608): avc:  denied  { dac_override } for  pid=8466 comm="dnsmasq" capability=1 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:system_r:dnsmasq_t:s0 tclass=capability
>type=SYSCALL msg=audit(1212097294.449:3608): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8465 pid=8466 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212097294.449:3609): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8466 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212097573.214:3620): avc:  denied  { read append } for  pid=8602 comm="dnsmasq" name="dnsmasq.leases" dev=dm-4 ino=33683 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:system_crond_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1212097573.214:3620): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8601 pid=8602 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212097573.215:3621): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8602 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212097667.850:3622): avc:  denied  { add_name } for  pid=8645 comm="dnsmasq" name="dnsmasq.leases" scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:system_crond_var_lib_t:s0 tclass=dir
>type=SYSCALL msg=audit(1212097667.850:3622): arch=c000003e syscall=2 success=no exit=-13 a0=41bbf4 a1=442 a2=1b6 a3=440 items=0 ppid=8644 pid=8645 auid=500 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=ANOM_ABEND msg=audit(1212097667.851:3623): auid=500 uid=0 gid=0 subj=system_u:system_r:dnsmasq_t:s0 pid=8645 comm="dnsmasq" sig=11
>type=AVC msg=audit(1212099342.250:3656): avc:  denied  { name_connect } for  pid=9204 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.250:3656): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62bb90 a2=10 a3=0 items=0 ppid=9122 pid=9204 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.250:3657): avc:  denied  { name_connect } for  pid=9204 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.250:3657): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62c620 a2=10 a3=0 items=0 ppid=9122 pid=9204 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.254:3658): avc:  denied  { name_connect } for  pid=9205 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.254:3658): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62bb90 a2=10 a3=0 items=0 ppid=9122 pid=9205 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.254:3659): avc:  denied  { name_connect } for  pid=9205 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.254:3659): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62c620 a2=10 a3=0 items=0 ppid=9122 pid=9205 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.256:3660): avc:  denied  { name_connect } for  pid=9206 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.256:3660): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62bb90 a2=10 a3=3f21d529f0 items=0 ppid=9122 pid=9206 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.256:3661): avc:  denied  { name_connect } for  pid=9206 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.256:3661): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62c620 a2=10 a3=3f21d529f0 items=0 ppid=9122 pid=9206 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.258:3662): avc:  denied  { name_connect } for  pid=9207 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.258:3662): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62bb90 a2=10 a3=0 items=0 ppid=9122 pid=9207 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.258:3663): avc:  denied  { name_connect } for  pid=9207 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.258:3663): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62c620 a2=10 a3=0 items=0 ppid=9122 pid=9207 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.261:3664): avc:  denied  { name_connect } for  pid=9208 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.261:3664): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62bb90 a2=10 a3=0 items=0 ppid=9122 pid=9208 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)
>type=AVC msg=audit(1212099342.261:3665): avc:  denied  { name_connect } for  pid=9208 comm="dnsmasq" dest=53 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:dns_port_t:s0 tclass=tcp_socket
>type=SYSCALL msg=audit(1212099342.261:3665): arch=c000003e syscall=42 success=no exit=-13 a0=f a1=62c620 a2=10 a3=0 items=0 ppid=9122 pid=9208 auid=500 uid=30 gid=40 euid=30 suid=30 fsuid=30 egid=40 sgid=40 fsgid=40 tty=(none) comm="dnsmasq" exe="/usr/sbin/dnsmasq" subj=system_u:system_r:dnsmasq_t:s0 key=(null)

Actions: View

Attachments on bug 449032: 307143 | 307144 | 307145 | 307146 | 307147 | 307150