Attachment 585957 Details for Bug 814334 – "ausearch -m avc -ts recent"

"ausearch -m avc -ts recent"

bug_814334.txt (text/plain), 7.32 KB, created by W. de Heiden on 2012-05-22 08:04:08 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: W. de Heiden

Created: 2012-05-22 08:04:08 UTC

Size: 7.32 KB

patch

obsolete

>----
>time->Tue May 22 09:52:58 2012
>type=SYSCALL msg=audit(1337673178.311:113): arch=c000003e syscall=21 success=no exit=-13 a0=7f0448f6e473 a1=2 a2=f a3=7fffc6aa3520 items=0 ppid=6870 pid=7067 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="fence_rhevm" exe="/usr/bin/python" subj=unconfined_u:system_r:fenced_t:s0 key=(null)
>type=AVC msg=audit(1337673178.311:113): avc:  denied  { write } for  pid=7067 comm="fence_rhevm" name="nssdb" dev=dm-0 ino=6732 scontext=unconfined_u:system_r:fenced_t:s0 tcontext=system_u:object_r:cert_t:s0 tclass=dir
>----
>time->Tue May 22 09:52:58 2012
>type=SYSCALL msg=audit(1337673178.337:114): arch=c000003e syscall=2 success=no exit=-13 a0=10fa820 a1=42 a2=1a4 a3=1a4 items=0 ppid=6870 pid=7067 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="fence_rhevm" exe="/usr/bin/python" subj=unconfined_u:system_r:fenced_t:s0 key=(null)
>type=AVC msg=audit(1337673178.337:114): avc:  denied  { write } for  pid=7067 comm="fence_rhevm" name="cert9.db" dev=dm-0 ino=16711 scontext=unconfined_u:system_r:fenced_t:s0 tcontext=system_u:object_r:cert_t:s0 tclass=file
>----
>time->Tue May 22 09:52:58 2012
>type=SYSCALL msg=audit(1337673178.338:115): arch=c000003e syscall=2 success=no exit=-13 a0=1108900 a1=42 a2=1a4 a3=1a4 items=0 ppid=6870 pid=7067 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="fence_rhevm" exe="/usr/bin/python" subj=unconfined_u:system_r:fenced_t:s0 key=(null)
>type=AVC msg=audit(1337673178.338:115): avc:  denied  { write } for  pid=7067 comm="fence_rhevm" name="key4.db" dev=dm-0 ino=6775 scontext=unconfined_u:system_r:fenced_t:s0 tcontext=system_u:object_r:cert_t:s0 tclass=file
>----
>time->Tue May 22 09:53:10 2012
>type=SYSCALL msg=audit(1337673190.148:120): arch=c000003e syscall=2 success=no exit=-13 a0=1642bb0 a1=241 a2=1b6 a3=0 items=0 ppid=8639 pid=8641 auid=0 uid=26 gid=26 euid=26 suid=26 fsuid=26 egid=26 sgid=26 fsgid=26 tty=(none) ses=1 comm="postmaster" exe="/usr/bin/postgres" subj=unconfined_u:system_r:postgresql_t:s0 key=(null)
>type=AVC msg=audit(1337673190.148:120): avc:  denied  { write } for  pid=8641 comm="postmaster" name="postgres-8:postgres_server.pid" dev=dm-0 ino=142382 scontext=unconfined_u:system_r:postgresql_t:s0 tcontext=unconfined_u:object_r:rgmanager_var_run_t:s0 tclass=file
>----
>time->Tue May 22 09:54:36 2012
>type=SYSCALL msg=audit(1337673276.667:133): arch=c000003e syscall=2 success=no exit=-13 a0=2a7dbb0 a1=241 a2=1b6 a3=0 items=0 ppid=10303 pid=10305 auid=0 uid=26 gid=26 euid=26 suid=26 fsuid=26 egid=26 sgid=26 fsgid=26 tty=(none) ses=1 comm="postmaster" exe="/usr/bin/postgres" subj=unconfined_u:system_r:postgresql_t:s0 key=(null)
>type=AVC msg=audit(1337673276.667:133): avc:  denied  { write } for  pid=10305 comm="postmaster" name="postgres-8:postgres_server.pid" dev=dm-0 ino=142382 scontext=unconfined_u:system_r:postgresql_t:s0 tcontext=unconfined_u:object_r:rgmanager_var_run_t:s0 tclass=file
>----
>time->Tue May 22 09:55:15 2012
>type=SYSCALL msg=audit(1337673315.793:141): arch=c000003e syscall=4 success=yes exit=0 a0=2305594 a1=7f8abb5fd3b0 a2=7f8abb5fd3b0 a3=7f8abb5fd2b8 items=0 ppid=1 pid=1670 auid=4294967295 uid=175 gid=175 euid=175 suid=175 fsuid=175 egid=175 sgid=175 fsgid=175 tty=(none) ses=4294967295 comm="rhev-agentd.py" exe="/usr/bin/python" subj=system_u:system_r:rhev_agentd_t:s0 key=(null)
>type=AVC msg=audit(1337673315.793:141): avc:  denied  { getattr } for  pid=1670 comm="rhev-agentd.py" path="/sys/kernel/config" dev=configfs ino=42210 scontext=system_u:system_r:rhev_agentd_t:s0 tcontext=system_u:object_r:configfs_t:s0 tclass=dir
>----
>time->Tue May 22 09:55:15 2012
>type=SYSCALL msg=audit(1337673315.793:140): arch=c000003e syscall=137 success=yes exit=0 a0=2305594 a1=7f8abb5fd440 a2=37011b3dc8 a3=7f8abb5fd2b8 items=0 ppid=1 pid=1670 auid=4294967295 uid=175 gid=175 euid=175 suid=175 fsuid=175 egid=175 sgid=175 fsgid=175 tty=(none) ses=4294967295 comm="rhev-agentd.py" exe="/usr/bin/python" subj=system_u:system_r:rhev_agentd_t:s0 key=(null)
>type=AVC msg=audit(1337673315.793:140): avc:  denied  { search } for  pid=1670 comm="rhev-agentd.py" name="/" dev=sysfs ino=1 scontext=system_u:system_r:rhev_agentd_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir
>----
>time->Tue May 22 09:56:06 2012
>type=SYSCALL msg=audit(1337673366.518:148): arch=c000003e syscall=2 success=no exit=-13 a0=f9abb0 a1=241 a2=1b6 a3=0 items=0 ppid=12105 pid=12107 auid=0 uid=26 gid=26 euid=26 suid=26 fsuid=26 egid=26 sgid=26 fsgid=26 tty=(none) ses=1 comm="postmaster" exe="/usr/bin/postgres" subj=unconfined_u:system_r:postgresql_t:s0 key=(null)
>type=AVC msg=audit(1337673366.518:148): avc:  denied  { write } for  pid=12107 comm="postmaster" name="postgres-8:postgres_server.pid" dev=dm-0 ino=142382 scontext=unconfined_u:system_r:postgresql_t:s0 tcontext=unconfined_u:object_r:rgmanager_var_run_t:s0 tclass=file
>----
>time->Tue May 22 09:57:36 2012
>type=SYSCALL msg=audit(1337673456.592:185): arch=c000003e syscall=2 success=no exit=-13 a0=b4bbb0 a1=241 a2=1b6 a3=0 items=0 ppid=13912 pid=13914 auid=0 uid=26 gid=26 euid=26 suid=26 fsuid=26 egid=26 sgid=26 fsgid=26 tty=(none) ses=1 comm="postmaster" exe="/usr/bin/postgres" subj=unconfined_u:system_r:postgresql_t:s0 key=(null)
>type=AVC msg=audit(1337673456.592:185): avc:  denied  { write } for  pid=13914 comm="postmaster" name="postgres-8:postgres_server.pid" dev=dm-0 ino=142382 scontext=unconfined_u:system_r:postgresql_t:s0 tcontext=unconfined_u:object_r:rgmanager_var_run_t:s0 tclass=file
>----
>time->Tue May 22 09:59:06 2012
>type=SYSCALL msg=audit(1337673546.661:198): arch=c000003e syscall=2 success=no exit=-13 a0=1312bb0 a1=241 a2=1b6 a3=0 items=0 ppid=15715 pid=15717 auid=0 uid=26 gid=26 euid=26 suid=26 fsuid=26 egid=26 sgid=26 fsgid=26 tty=(none) ses=1 comm="postmaster" exe="/usr/bin/postgres" subj=unconfined_u:system_r:postgresql_t:s0 key=(null)
>type=AVC msg=audit(1337673546.661:198): avc:  denied  { write } for  pid=15717 comm="postmaster" name="postgres-8:postgres_server.pid" dev=dm-0 ino=142382 scontext=unconfined_u:system_r:postgresql_t:s0 tcontext=unconfined_u:object_r:rgmanager_var_run_t:s0 tclass=file
>----
>time->Tue May 22 10:00:16 2012
>type=SYSCALL msg=audit(1337673616.469:211): arch=c000003e syscall=137 success=yes exit=0 a0=2305714 a1=7f8abb5fd440 a2=37011b3dc8 a3=7f8abb5fd2b8 items=0 ppid=1 pid=1670 auid=4294967295 uid=175 gid=175 euid=175 suid=175 fsuid=175 egid=175 sgid=175 fsgid=175 tty=(none) ses=4294967295 comm="rhev-agentd.py" exe="/usr/bin/python" subj=system_u:system_r:rhev_agentd_t:s0 key=(null)
>type=AVC msg=audit(1337673616.469:211): avc:  denied  { search } for  pid=1670 comm="rhev-agentd.py" name="/" dev=sysfs ino=1 scontext=system_u:system_r:rhev_agentd_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir
>----
>time->Tue May 22 10:00:16 2012
>type=SYSCALL msg=audit(1337673616.469:212): arch=c000003e syscall=4 success=yes exit=0 a0=2305714 a1=7f8abb5fd3b0 a2=7f8abb5fd3b0 a3=7f8abb5fd2b8 items=0 ppid=1 pid=1670 auid=4294967295 uid=175 gid=175 euid=175 suid=175 fsuid=175 egid=175 sgid=175 fsgid=175 tty=(none) ses=4294967295 comm="rhev-agentd.py" exe="/usr/bin/python" subj=system_u:system_r:rhev_agentd_t:s0 key=(null)
>type=AVC msg=audit(1337673616.469:212): avc:  denied  { getattr } for  pid=1670 comm="rhev-agentd.py" path="/sys/kernel/config" dev=configfs ino=42210 scontext=system_u:system_r:rhev_agentd_t:s0 tcontext=system_u:object_r:configfs_t:s0 tclass=dir

Actions: View

Attachments on bug 814334: 578684 | 585957