Attachment 598118 Details for Bug 840093 – AVCs generated while using "mail" as staff_u

AVCs generated while using "mail" as staff_u

avcs.txt (text/plain), 7.71 KB, created by Konstantin Ryabitsev on 2012-07-13 17:05:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Konstantin Ryabitsev

Created: 2012-07-13 17:05:24 UTC

Size: 7.71 KB

patch

obsolete

>type=AVC msg=audit(1342198629.522:3279): avc:  denied  { rlimitinh } for  pid=20175 comm="setfiles" scontext=staff_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=staff_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1342198629.522:3279): avc:  denied  { siginh } for  pid=20175 comm="setfiles" scontext=staff_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=staff_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1342198629.522:3279): avc:  denied  { noatsecure } for  pid=20175 comm="setfiles" scontext=staff_u:unconfined_r:semanage_t:s0-s0:c0.c1023 tcontext=staff_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1342198629.522:3279): arch=c000003e syscall=59 success=yes exit=0 a0=4792bc0 a1=13ef22e0 a2=0 a3=31 items=2 ppid=20173 pid=20175 auid=501 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=94 comm="setfiles" exe="/sbin/setfiles" subj=staff_u:unconfined_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>type=EXECVE msg=audit(1342198629.522:3279): argc=5 a0="/sbin/setfiles" a1="-q" a2="-c" a3="/etc/selinux/targeted/policy/policy.24" a4="/etc/selinux/targeted/contexts/files/file_contexts"
>type=CWD msg=audit(1342198629.522:3279):  cwd="/home/mricon"
>type=PATH msg=audit(1342198629.522:3279): item=0 name="/sbin/setfiles" inode=480 dev=fc:03 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:setfiles_exec_t:s0
>type=PATH msg=audit(1342198629.522:3279): item=1 name=(null) inode=264849 dev=fc:03 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0
>type=AVC msg=audit(1342198683.028:3554): avc:  denied  { search } for  pid=20180 comm="sendmail" name="postfix" dev=vda3 ino=507 scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=system_u:object_r:postfix_spool_t:s0 tclass=dir
>type=SYSCALL msg=audit(1342198683.028:3554): arch=c000003e syscall=80 success=yes exit=0 a0=7ff5436c82f0 a1=7ff5436ca090 a2=7ff5436ce6fd a3=7fff8082a8e0 items=1 ppid=1 pid=20180 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=501 sgid=501 fsgid=501 tty=pts0 ses=92 comm="sendmail" exe="/usr/sbin/sendmail.postfix" subj=staff_u:staff_r:staff_t:s0-s0:c0.c1023 key=(null)
>type=CWD msg=audit(1342198683.028:3554):  cwd="/home/mricon"
>type=PATH msg=audit(1342198683.028:3554): item=0 name="/var/spool/postfix" inode=507 dev=fc:03 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:postfix_spool_t:s0
>type=AVC msg=audit(1342198683.029:3555): avc:  denied  { read write } for  pid=20181 comm="postdrop" path="socket:[137941]" dev=sockfs ino=137941 scontext=staff_u:staff_r:postfix_postdrop_t:s0-s0:c0.c1023 tcontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tclass=unix_stream_socket
>type=AVC msg=audit(1342198683.029:3555): avc:  denied  { rlimitinh } for  pid=20181 comm="postdrop" scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=staff_u:staff_r:postfix_postdrop_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1342198683.029:3555): avc:  denied  { siginh } for  pid=20181 comm="postdrop" scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=staff_u:staff_r:postfix_postdrop_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1342198683.029:3555): avc:  denied  { noatsecure } for  pid=20181 comm="postdrop" scontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tcontext=staff_u:staff_r:postfix_postdrop_t:s0-s0:c0.c1023 tclass=process
>type=SYSCALL msg=audit(1342198683.029:3555): arch=c000003e syscall=59 success=yes exit=0 a0=7ff5436cf190 a1=7ff5436cf1c0 a2=7ff5436ce9a0 a3=7fff8082a7e0 items=2 ppid=20180 pid=20181 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=90 sgid=90 fsgid=90 tty=pts0 ses=92 comm="postdrop" exe="/usr/sbin/postdrop" subj=staff_u:staff_r:postfix_postdrop_t:s0-s0:c0.c1023 key=(null)
>type=EXECVE msg=audit(1342198683.029:3555): argc=2 a0="/usr/sbin/postdrop" a1="-r"
>type=CWD msg=audit(1342198683.029:3555):  cwd="/var/spool/postfix"
>type=PATH msg=audit(1342198683.029:3555): item=0 name="/usr/sbin/postdrop" inode=269695 dev=fc:03 mode=0102755 ouid=0 ogid=90 rdev=00:00 obj=system_u:object_r:postfix_postdrop_exec_t:s0
>type=PATH msg=audit(1342198683.029:3555): item=1 name=(null) inode=264849 dev=fc:03 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0
>type=AVC msg=audit(1342198683.032:3556): avc:  denied  { getattr } for  pid=20181 comm="postdrop" path="socket:[137941]" dev=sockfs ino=137941 scontext=staff_u:staff_r:postfix_postdrop_t:s0-s0:c0.c1023 tcontext=staff_u:staff_r:staff_t:s0-s0:c0.c1023 tclass=unix_stream_socket
>type=SYSCALL msg=audit(1342198683.032:3556): arch=c000003e syscall=5 success=yes exit=0 a0=0 a1=7fff82592210 a2=7fff82592210 a3=7fff82591f40 items=0 ppid=20180 pid=20181 auid=501 uid=501 gid=501 euid=501 suid=501 fsuid=501 egid=90 sgid=90 fsgid=90 tty=pts0 ses=92 comm="postdrop" exe="/usr/sbin/postdrop" subj=staff_u:staff_r:postfix_postdrop_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1342198683.036:3559): avc:  denied  { rlimitinh } for  pid=20182 comm="cleanup" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system_r:postfix_cleanup_t:s0 tclass=process
>type=AVC msg=audit(1342198683.036:3559): avc:  denied  { siginh } for  pid=20182 comm="cleanup" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system_r:postfix_cleanup_t:s0 tclass=process
>type=AVC msg=audit(1342198683.036:3559): avc:  denied  { noatsecure } for  pid=20182 comm="cleanup" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system_r:postfix_cleanup_t:s0 tclass=process
>type=SYSCALL msg=audit(1342198683.036:3559): arch=c000003e syscall=59 success=yes exit=0 a0=7f30479b30d0 a1=7f30479b3210 a2=7f30479af230 a3=7fff20ec8a60 items=2 ppid=1514 pid=20182 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cleanup" exe="/usr/libexec/postfix/cleanup" subj=system_u:system_r:postfix_cleanup_t:s0 key=(null)
>type=EXECVE msg=audit(1342198683.036:3559): argc=5 a0="cleanup" a1="-z" a2="-t" a3="unix" a4="-u"
>type=CWD msg=audit(1342198683.036:3559):  cwd="/var/spool/postfix"
>type=PATH msg=audit(1342198683.036:3559): item=0 name="/usr/libexec/postfix/cleanup" inode=269666 dev=fc:03 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:postfix_cleanup_exec_t:s0
>type=PATH msg=audit(1342198683.036:3559): item=1 name=(null) inode=264849 dev=fc:03 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0
>type=AVC msg=audit(1342198683.053:3560): avc:  denied  { rlimitinh } for  pid=20184 comm="smtp" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system_r:postfix_smtp_t:s0 tclass=process
>type=AVC msg=audit(1342198683.053:3560): avc:  denied  { siginh } for  pid=20184 comm="smtp" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system_r:postfix_smtp_t:s0 tclass=process
>type=AVC msg=audit(1342198683.053:3560): avc:  denied  { noatsecure } for  pid=20184 comm="smtp" scontext=system_u:system_r:postfix_master_t:s0 tcontext=system_u:system_r:postfix_smtp_t:s0 tclass=process
>type=SYSCALL msg=audit(1342198683.053:3560): arch=c000003e syscall=59 success=yes exit=0 a0=7f30479b5030 a1=7f30479b5480 a2=7f30479af230 a3=7fff20ec8a60 items=2 ppid=1514 pid=20184 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="smtp" exe="/usr/libexec/postfix/smtp" subj=system_u:system_r:postfix_smtp_t:s0 key=(null)
>type=EXECVE msg=audit(1342198683.053:3560): argc=4 a0="smtp" a1="-t" a2="unix" a3="-u"
>type=CWD msg=audit(1342198683.053:3560):  cwd="/var/spool/postfix"
>type=PATH msg=audit(1342198683.053:3560): item=0 name="/usr/libexec/postfix/smtp" inode=272231 dev=fc:03 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:postfix_smtp_exec_t:s0
>type=PATH msg=audit(1342198683.053:3560): item=1 name=(null) inode=264849 dev=fc:03 mode=0100755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:ld_so_t:s0

Actions: View

Attachments on bug 840093: 598118