Attachment 611669 Details for Bug 854610 – AVCs with paths

AVCs with paths

avcs-mailman-paths.txt (text/plain), 11.81 KB, created by Michal Trunecka on 2012-09-11 06:57:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Michal Trunecka

Created: 2012-09-11 06:57:21 UTC

Size: 11.81 KB

patch

obsolete

>----
>time->Tue Sep 11 08:35:24 2012
>type=PATH msg=audit(1347345324.524:3445): item=0 name="/usr/lib/mailman/Mailman/mm_cfg.pyc" inode=149972 dev=08:03 mode=0100644 ouid=0 ogid=41 rdev=00:00 obj=system_u:object_r:lib_t:s0
>type=CWD msg=audit(1347345324.524:3445):  cwd="/"
>type=SYSCALL msg=audit(1347345324.524:3445): arch=c000003e syscall=2 success=no exit=-13 a0=af9380 a1=241 a2=1b6 a3=0 items=1 ppid=8763 pid=8766 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="mailman-update-" exe="/usr/bin/python" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345324.524:3445): avc:  denied  { write } for  pid=8766 comm="mailman-update-" name="mm_cfg.pyc" dev=sda3 ino=149972 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>----
>time->Tue Sep 11 08:35:24 2012
>type=PATH msg=audit(1347345324.540:3446): item=0 name=(null) inode=130006 dev=08:03 mode=0140666 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:abrt_var_run_t:s0
>type=SOCKADDR msg=audit(1347345324.540:3446): saddr=01002F7661722F72756E2F616272742F616272742E736F636B6574
>type=SYSCALL msg=audit(1347345324.540:3446): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7fffbd1f1960 a2=1b a3=7fffbd1f1688 items=1 ppid=8763 pid=8766 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="mailman-update-" exe="/usr/bin/python" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345324.540:3446): avc:  denied  { write } for  pid=8766 comm="mailman-update-" name="abrt.socket" dev=sda3 ino=130006 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=unconfined_u:object_r:abrt_var_run_t:s0 tclass=sock_file
>----
>time->Tue Sep 11 08:35:24 2012
>type=PATH msg=audit(1347345324.946:3447): item=1 name="/etc/cron.d/mailman" inode=148271 dev=08:03 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:system_cron_spool_t:s0
>type=PATH msg=audit(1347345324.946:3447): item=0 name="/etc/cron.d/" inode=137390 dev=08:03 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:system_cron_spool_t:s0
>type=CWD msg=audit(1347345324.946:3447):  cwd="/"
>type=SYSCALL msg=audit(1347345324.946:3447): arch=c000003e syscall=87 success=no exit=-13 a0=7fff0dbfff73 a1=7fff0dbfff73 a2=7fff0dbfeb10 a3=7fff0dbfe600 items=2 ppid=8763 pid=8789 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="install" exe="/usr/bin/install" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345324.946:3447): avc:  denied  { write } for  pid=8789 comm="install" name="cron.d" dev=sda3 ino=137390 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:system_cron_spool_t:s0 tclass=dir
>----
>time->Tue Sep 11 08:35:27 2012
>type=PATH msg=audit(1347345327.988:3450): item=0 name="/usr/lib/mailman/Mailman/mm_cfg.pyc" inode=149972 dev=08:03 mode=0100644 ouid=0 ogid=41 rdev=00:00 obj=system_u:object_r:lib_t:s0
>type=CWD msg=audit(1347345327.988:3450):  cwd="/"
>type=SYSCALL msg=audit(1347345327.988:3450): arch=c000003e syscall=2 success=no exit=-13 a0=b30380 a1=241 a2=1b6 a3=0 items=1 ppid=8875 pid=8878 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="mailman-update-" exe="/usr/bin/python" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345327.988:3450): avc:  denied  { write } for  pid=8878 comm="mailman-update-" name="mm_cfg.pyc" dev=sda3 ino=149972 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>----
>time->Tue Sep 11 08:35:28 2012
>type=PATH msg=audit(1347345328.004:3451): item=0 name=(null) inode=130006 dev=08:03 mode=0140666 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:abrt_var_run_t:s0
>type=SOCKADDR msg=audit(1347345328.004:3451): saddr=01002F7661722F72756E2F616272742F616272742E736F636B6574
>type=SYSCALL msg=audit(1347345328.004:3451): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7fff75a966c0 a2=1b a3=7fff75a963e8 items=1 ppid=8875 pid=8878 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="mailman-update-" exe="/usr/bin/python" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345328.004:3451): avc:  denied  { write } for  pid=8878 comm="mailman-update-" name="abrt.socket" dev=sda3 ino=130006 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=unconfined_u:object_r:abrt_var_run_t:s0 tclass=sock_file
>----
>time->Tue Sep 11 08:35:28 2012
>type=PATH msg=audit(1347345328.319:3452): item=0 name="/etc/cron.d/mailman" inode=148271 dev=08:03 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:system_cron_spool_t:s0
>type=CWD msg=audit(1347345328.319:3452):  cwd="/"
>type=SYSCALL msg=audit(1347345328.319:3452): arch=c000003e syscall=2 success=no exit=-13 a0=1757c80 a1=241 a2=1b6 a3=76 items=1 ppid=8875 pid=8882 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="mailman" exe="/bin/bash" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345328.319:3452): avc:  denied  { write } for  pid=8882 comm="mailman" name="mailman" dev=sda3 ino=148271 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:system_cron_spool_t:s0 tclass=file
>----
>time->Tue Sep 11 08:35:28 2012
>type=PATH msg=audit(1347345328.319:3453): item=0 name="/etc/cron.d/mailman" inode=148271 dev=08:03 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:system_cron_spool_t:s0
>type=CWD msg=audit(1347345328.319:3453):  cwd="/"
>type=SYSCALL msg=audit(1347345328.319:3453): arch=c000003e syscall=2 success=no exit=-13 a0=1757c80 a1=201 a2=1b6 a3=76 items=1 ppid=8875 pid=8882 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="mailman" exe="/bin/bash" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345328.319:3453): avc:  denied  { write } for  pid=8882 comm="mailman" name="mailman" dev=sda3 ino=148271 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:system_cron_spool_t:s0 tclass=file
>----
>time->Tue Sep 11 08:35:28 2012
>type=PATH msg=audit(1347345328.341:3454): item=0 name="/usr/lib/mailman/Mailman/mm_cfg.pyc" inode=149972 dev=08:03 mode=0100644 ouid=0 ogid=41 rdev=00:00 obj=system_u:object_r:lib_t:s0
>type=CWD msg=audit(1347345328.341:3454):  cwd="/"
>type=SYSCALL msg=audit(1347345328.341:3454): arch=c000003e syscall=2 success=no exit=-13 a0=24ba380 a1=241 a2=1b6 a3=0 items=1 ppid=8875 pid=8883 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="mailman-update-" exe="/usr/bin/python" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345328.341:3454): avc:  denied  { write } for  pid=8883 comm="mailman-update-" name="mm_cfg.pyc" dev=sda3 ino=149972 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>----
>time->Tue Sep 11 08:35:28 2012
>type=PATH msg=audit(1347345328.352:3455): item=0 name=(null) inode=130006 dev=08:03 mode=0140666 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:abrt_var_run_t:s0
>type=SOCKADDR msg=audit(1347345328.352:3455): saddr=01002F7661722F72756E2F616272742F616272742E736F636B6574
>type=SYSCALL msg=audit(1347345328.352:3455): arch=c000003e syscall=42 success=no exit=-13 a0=4 a1=7fff0fc9a510 a2=1b a3=7fff0fc9a238 items=1 ppid=8875 pid=8883 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="mailman-update-" exe="/usr/bin/python" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345328.352:3455): avc:  denied  { write } for  pid=8883 comm="mailman-update-" name="abrt.socket" dev=sda3 ino=130006 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=unconfined_u:object_r:abrt_var_run_t:s0 tclass=sock_file
>----
>time->Tue Sep 11 08:35:28 2012
>type=PATH msg=audit(1347345328.727:3456): item=1 name="/etc/cron.d/mailman" inode=148271 dev=08:03 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:system_cron_spool_t:s0
>type=PATH msg=audit(1347345328.727:3456): item=0 name="/etc/cron.d/" inode=137390 dev=08:03 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:system_cron_spool_t:s0
>type=CWD msg=audit(1347345328.727:3456):  cwd="/"
>type=SYSCALL msg=audit(1347345328.727:3456): arch=c000003e syscall=87 success=no exit=-13 a0=7fff32afbf73 a1=7fff32afbf73 a2=7fff32af9810 a3=7fff32af9300 items=2 ppid=8875 pid=8896 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts1 ses=3 comm="install" exe="/usr/bin/install" subj=unconfined_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345328.727:3456): avc:  denied  { write } for  pid=8896 comm="install" name="cron.d" dev=sda3 ino=137390 scontext=unconfined_u:system_r:initrc_t:s0 tcontext=system_u:object_r:system_cron_spool_t:s0 tclass=dir
>----
>time->Tue Sep 11 08:35:31 2012
>type=PATH msg=audit(1347345331.268:3461): item=0 name="/usr/lib/mailman/Mailman/mm_cfg.pyc" inode=149972 dev=08:03 mode=0100644 ouid=0 ogid=41 rdev=00:00 obj=system_u:object_r:lib_t:s0
>type=CWD msg=audit(1347345331.268:3461):  cwd="/"
>type=SYSCALL msg=audit(1347345331.268:3461): arch=c000003e syscall=2 success=no exit=-13 a0=f08380 a1=241 a2=1b6 a3=0 items=1 ppid=9046 pid=9050 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts6 ses=3 comm="mailman-update-" exe="/usr/bin/python" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345331.268:3461): avc:  denied  { write } for  pid=9050 comm="mailman-update-" name="mm_cfg.pyc" dev=sda3 ino=149972 scontext=system_u:system_r:initrc_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=file
>----
>time->Tue Sep 11 08:35:31 2012
>type=PATH msg=audit(1347345331.286:3462): item=0 name=(null) inode=130006 dev=08:03 mode=0140666 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:abrt_var_run_t:s0
>type=SOCKADDR msg=audit(1347345331.286:3462): saddr=01002F7661722F72756E2F616272742F616272742E736F636B6574
>type=SYSCALL msg=audit(1347345331.286:3462): arch=c000003e syscall=42 success=no exit=-13 a0=5 a1=7fffb0423c30 a2=1b a3=7fffb0423958 items=1 ppid=9046 pid=9050 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts6 ses=3 comm="mailman-update-" exe="/usr/bin/python" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345331.286:3462): avc:  denied  { write } for  pid=9050 comm="mailman-update-" name="abrt.socket" dev=sda3 ino=130006 scontext=system_u:system_r:initrc_t:s0 tcontext=unconfined_u:object_r:abrt_var_run_t:s0 tclass=sock_file
>----
>time->Tue Sep 11 08:35:31 2012
>type=PATH msg=audit(1347345331.628:3463): item=0 name="/etc/cron.d/mailman" inode=148271 dev=08:03 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:system_cron_spool_t:s0
>type=CWD msg=audit(1347345331.628:3463):  cwd="/"
>type=SYSCALL msg=audit(1347345331.628:3463): arch=c000003e syscall=2 success=no exit=-13 a0=2481230 a1=241 a2=1b6 a3=76 items=1 ppid=9046 pid=9066 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts6 ses=3 comm="mailman" exe="/bin/bash" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345331.628:3463): avc:  denied  { write } for  pid=9066 comm="mailman" name="mailman" dev=sda3 ino=148271 scontext=system_u:system_r:initrc_t:s0 tcontext=system_u:object_r:system_cron_spool_t:s0 tclass=file
>----
>time->Tue Sep 11 08:35:31 2012
>type=PATH msg=audit(1347345331.634:3464): item=0 name="/etc/cron.d/mailman" inode=148271 dev=08:03 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:system_cron_spool_t:s0
>type=CWD msg=audit(1347345331.634:3464):  cwd="/"
>type=SYSCALL msg=audit(1347345331.634:3464): arch=c000003e syscall=2 success=no exit=-13 a0=2481230 a1=201 a2=1b6 a3=76 items=1 ppid=9046 pid=9066 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts6 ses=3 comm="mailman" exe="/bin/bash" subj=system_u:system_r:initrc_t:s0 key=(null)
>type=AVC msg=audit(1347345331.634:3464): avc:  denied  { write } for  pid=9066 comm="mailman" name="mailman" dev=sda3 ino=148271 scontext=system_u:system_r:initrc_t:s0 tcontext=system_u:object_r:system_cron_spool_t:s0 tclass=file
>

Actions: View

Attachments on bug 854610: 610017 | 611669