Attachment 604351 Details for Bug 846972 – avc.txt

avc.txt

avc.txt (text/plain), 9.67 KB, created by GV on 2012-08-14 16:10:07 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: GV

Created: 2012-08-14 16:10:07 UTC

Size: 9.67 KB

patch

obsolete

>----
>time->Thu Aug  9 13:28:58 2012
>type=SYSCALL msg=audit(1344508138.062:17): arch=c000003e syscall=2 success=no exit=-13 a0=2118050 a1=c2 a2=180 a3=b8f9b5b9db536e57 items=0 ppid=533 pid=562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="mktemp" exe="/usr/bin/mktemp" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1344508138.062:17): avc:  denied  { search } for  pid=562 comm="mktemp" name="/" dev="dm-1" ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Thu Aug  9 13:29:05 2012
>type=SYSCALL msg=audit(1344508145.558:40): arch=c000003e syscall=4 success=no exit=-13 a0=7fe4b3011960 a1=7fff46dfea00 a2=7fff46dfea00 a3=1 items=0 ppid=631 pid=719 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344508145.558:40): avc:  denied  { getattr } for  pid=719 comm="sshd" path="/tmp" dev="dm-1" ino=2 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Thu Aug  9 13:34:51 2012
>type=SYSCALL msg=audit(1344508491.409:12): arch=c000003e syscall=2 success=no exit=-13 a0=2101050 a1=c2 a2=180 a3=172a2e830c3c046 items=0 ppid=558 pid=587 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="mktemp" exe="/usr/bin/mktemp" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1344508491.409:12): avc:  denied  { search } for  pid=587 comm="mktemp" name="/" dev="dm-1" ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Thu Aug  9 13:34:55 2012
>type=SYSCALL msg=audit(1344508495.919:34): arch=c000003e syscall=4 success=no exit=-13 a0=7fdd977b3960 a1=7fff6785cf90 a2=7fff6785cf90 a3=1 items=0 ppid=656 pid=739 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344508495.919:34): avc:  denied  { getattr } for  pid=739 comm="sshd" path="/tmp" dev="dm-1" ino=2 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Aug 14 08:58:35 2012
>type=SYSCALL msg=audit(1344923915.141:17): arch=c000003e syscall=2 success=no exit=-13 a0=1a69050 a1=c2 a2=180 a3=5c068872441bc83a items=0 ppid=546 pid=576 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="mktemp" exe="/usr/bin/mktemp" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1344923915.141:17): avc:  denied  { search } for  pid=576 comm="mktemp" name="/" dev="dm-0" ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Aug 14 09:00:54 2012
>type=SYSCALL msg=audit(1344924054.083:36): arch=c000003e syscall=59 success=yes exit=0 a0=1f95350 a1=1f95650 a2=1f93560 a3=7fff53896d70 items=0 ppid=859 pid=861 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=1 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924054.083:36): avc:  denied  { read append } for  pid=861 comm="load_policy" path="/tmp/tmpzIvoXo" dev="dm-0" ino=20 scontext=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>type=AVC msg=audit(1344924054.083:36): avc:  denied  { read append } for  pid=861 comm="load_policy" path="/tmp/tmpzIvoXo" dev="dm-0" ino=20 scontext=unconfined_u:system_r:load_policy_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Aug 14 09:01:00 2012
>type=SYSCALL msg=audit(1344924060.403:39): arch=c000003e syscall=59 success=yes exit=0 a0=1f97e00 a1=1f98500 a2=1f93560 a3=7fff53896860 items=0 ppid=859 pid=1402 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=1 comm="restorecon" exe="/usr/sbin/setfiles" subj=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924060.403:39): avc:  denied  { append } for  pid=1402 comm="restorecon" path="/tmp/tmpzIvoXo" dev="dm-0" ino=20 scontext=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Aug 14 09:01:01 2012
>type=SYSCALL msg=audit(1344924061.732:40): arch=c000003e syscall=59 success=yes exit=0 a0=10552e0 a1=1053300 a2=1053030 a3=7fff9aae4f10 items=0 ppid=1404 pid=1405 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=1 comm="groupadd" exe="/usr/sbin/groupadd" subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924061.732:40): avc:  denied  { read append } for  pid=1405 comm="groupadd" path="/tmp/tmpzIvoXo" dev="dm-0" ino=20 scontext=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Aug 14 09:01:00 2012
>type=SYSCALL msg=audit(1344924060.115:38): arch=c000003e syscall=59 success=yes exit=0 a0=2644f40 a1=2637560 a2=2621550 a3=7fff016e4240 items=0 ppid=863 pid=1376 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=1 comm="restorecon" exe="/usr/sbin/setfiles" subj=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924060.115:38): avc:  denied  { append } for  pid=1376 comm="restorecon" path="/tmp/tmpzIvoXo" dev="dm-0" ino=20 scontext=unconfined_u:system_r:setfiles_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Aug 14 09:01:01 2012
>type=SYSCALL msg=audit(1344924061.753:41): arch=c000003e syscall=59 success=yes exit=0 a0=1055640 a1=1053300 a2=1053560 a3=7fff9aae4f10 items=0 ppid=1404 pid=1406 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=1 comm="groupadd" exe="/usr/sbin/groupadd" subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924061.753:41): avc:  denied  { read append } for  pid=1406 comm="groupadd" path="/tmp/tmpzIvoXo" dev="dm-0" ino=20 scontext=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Aug 14 09:01:01 2012
>type=SYSCALL msg=audit(1344924061.765:42): arch=c000003e syscall=59 success=yes exit=0 a0=1053170 a1=1053300 a2=1053560 a3=7fff9aae4f10 items=0 ppid=1404 pid=1407 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=1 comm="groupadd" exe="/usr/sbin/groupadd" subj=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924061.765:42): avc:  denied  { read append } for  pid=1407 comm="groupadd" path="/tmp/tmpzIvoXo" dev="dm-0" ino=20 scontext=unconfined_u:system_r:groupadd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Aug 14 09:01:01 2012
>type=SYSCALL msg=audit(1344924061.775:43): arch=c000003e syscall=59 success=yes exit=0 a0=1056220 a1=1053d50 a2=1053560 a3=7fff9aae4f10 items=0 ppid=1404 pid=1408 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=tty1 ses=1 comm="useradd" exe="/usr/sbin/useradd" subj=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924061.775:43): avc:  denied  { read append } for  pid=1408 comm="useradd" path="/tmp/tmpzIvoXo" dev="dm-0" ino=20 scontext=unconfined_u:system_r:useradd_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Aug 14 09:01:17 2012
>type=SYSCALL msg=audit(1344924077.827:92): arch=c000003e syscall=4 success=no exit=-13 a0=7f5a2bfee960 a1=7fff72b8ca00 a2=7fff72b8ca00 a3=1 items=0 ppid=640 pid=1920 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924077.827:92): avc:  denied  { getattr } for  pid=1920 comm="sshd" path="/tmp" dev="dm-0" ino=2 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Aug 14 09:03:24 2012
>type=SYSCALL msg=audit(1344924204.153:17): arch=c000003e syscall=2 success=no exit=-13 a0=717050 a1=c2 a2=180 a3=a8f03d3569eab29e items=0 ppid=529 pid=558 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="mktemp" exe="/usr/bin/mktemp" subj=system_u:system_r:dhcpc_t:s0 key=(null)
>type=AVC msg=audit(1344924204.153:17): avc:  denied  { search } for  pid=558 comm="mktemp" name="/" dev="dm-0" ino=2 scontext=system_u:system_r:dhcpc_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Aug 14 09:03:30 2012
>type=SYSCALL msg=audit(1344924210.397:40): arch=c000003e syscall=4 success=no exit=-13 a0=7f289a632960 a1=7fff9c995970 a2=7fff9c995970 a3=1 items=0 ppid=625 pid=716 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924210.397:40): avc:  denied  { getattr } for  pid=716 comm="sshd" path="/tmp" dev="dm-0" ino=2 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Aug 14 09:04:13 2012
>type=SYSCALL msg=audit(1344924253.387:63): arch=c000003e syscall=4 success=no exit=-13 a0=7fee049dd960 a1=7fffc5dbe5c0 a2=7fffc5dbe5c0 a3=1 items=0 ppid=625 pid=738 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="sshd" exe="/usr/sbin/sshd" subj=system_u:system_r:sshd_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1344924253.387:63): avc:  denied  { getattr } for  pid=738 comm="sshd" path="/tmp" dev="dm-0" ino=2 scontext=system_u:system_r:sshd_t:s0-s0:c0.c1023 tcontext=system_u:object_r:file_t:s0 tclass=dir

Actions: View

Attachments on bug 846972: 604351