Attachment 626105 Details for Bug 848939 – avc denials in permissive mode

avc denials in permissive mode

passenger-denials.log (text/plain), 5.28 KB, created by Orion Poplawski on 2012-10-12 16:07:22 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Orion Poplawski

Created: 2012-10-12 16:07:22 UTC

Size: 5.28 KB

patch

obsolete

>type=AVC msg=audit(1350056836.563:25): avc:  denied  { getattr } for  pid=820 comm="ruby" path="socket:[12799]" dev="sockfs" ino=12799 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket
>type=AVC msg=audit(1350056836.566:26): avc:  denied  { ioctl } for  pid=820 comm="ruby" path="socket:[12799]" dev="sockfs" ino=12799 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:system_r:init_t:s0 tclass=unix_stream_socket
>type=AVC msg=audit(1350056839.194:29): avc:  denied  { write } for  pid=774 comm="httpd" name="socket" dev="tmpfs" ino=14329 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:passenger_tmp_t:s0 tclass=sock_file
>type=AVC msg=audit(1350056842.202:33): avc:  denied  { listen } for  pid=932 comm="ruby" laddr=127.0.0.1 lport=58489 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:system_r:passenger_t:s0 tclass=tcp_socket
>type=AVC msg=audit(1350056843.211:44): avc:  denied  { execute } for  pid=1134 comm="ruby" name="ifconfig" dev="vda2" ino=276673 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=AVC msg=audit(1350056843.211:44): avc:  denied  { read open } for  pid=1134 comm="ruby" path="/usr/sbin/ifconfig" dev="vda2" ino=276673 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=AVC msg=audit(1350056843.211:44): avc:  denied  { execute_no_trans } for  pid=1134 comm="ruby" path="/usr/sbin/ifconfig" dev="vda2" ino=276673 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:ifconfig_exec_t:s0 tclass=file
>type=AVC msg=audit(1350056843.213:45): avc:  denied  { read } for  pid=1134 comm="ifconfig" name="unix" dev="proc" ino=4026531999 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=AVC msg=audit(1350056843.213:46): avc:  denied  { search } for  pid=1134 comm="ifconfig" name="net" dev="proc" ino=9829 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir
>type=AVC msg=audit(1350056843.213:47): avc:  denied  { open } for  pid=1134 comm="ifconfig" path="/proc/1134/net/dev" dev="proc" ino=4026531972 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=AVC msg=audit(1350056843.213:48): avc:  denied  { getattr } for  pid=1134 comm="ifconfig" path="/proc/1134/net/dev" dev="proc" ino=4026531972 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file
>type=AVC msg=audit(1350056843.258:49): avc:  denied  { name_bind } for  pid=1141 comm="ruby" src=6481 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=udp_socket
>type=AVC msg=audit(1350056847.563:50): avc:  denied  { write } for  pid=880 comm="httpd" name="ruby.JgJISiXboGJybu59C7RkSw5lcpt7BlgEGQ1o1d8Da51JwsXaRkUO70nas" dev="tmpfs" ino=15500 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:passenger_tmp_t:s0 tclass=sock_file
>type=AVC msg=audit(1350056856.039:55): avc:  denied  { create } for  pid=932 comm="ruby" name="201210121547.yaml20121012-932-227xw5.lock" scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:puppet_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1350056856.075:56): avc:  denied  { rmdir } for  pid=932 comm="ruby" name="201210121547.yaml20121012-932-227xw5.lock" dev="vda2" ino=146629 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:puppet_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1350057696.409:103): avc:  denied  { write } for  pid=879 comm="httpd" name="ruby.JgJISiXboGJybu59C7RkSw5lcpt7BlgEGQ1o1d8Da51JwsXaRkUO70nas" dev="tmpfs" ino=15500 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:passenger_tmp_t:s0 tclass=sock_file
>type=AVC msg=audit(1350057700.711:104): avc:  denied  { create } for  pid=932 comm="ruby" name="201210121601.yaml20121012-932-jh88de.lock" scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:puppet_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1350057700.829:105): avc:  denied  { rmdir } for  pid=932 comm="ruby" name="201210121601.yaml20121012-932-jh88de.lock" dev="vda2" ino=134076 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:puppet_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1350057742.177:108): avc:  denied  { write } for  pid=883 comm="httpd" name="ruby.JgJISiXboGJybu59C7RkSw5lcpt7BlgEGQ1o1d8Da51JwsXaRkUO70nas" dev="tmpfs" ino=15500 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:passenger_tmp_t:s0 tclass=sock_file
>type=AVC msg=audit(1350057853.178:129): avc:  denied  { write } for  pid=882 comm="httpd" name="ruby.JgJISiXboGJybu59C7RkSw5lcpt7BlgEGQ1o1d8Da51JwsXaRkUO70nas" dev="tmpfs" ino=15500 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:passenger_tmp_t:s0 tclass=sock_file
>type=AVC msg=audit(1350057862.516:132): avc:  denied  { create } for  pid=932 comm="ruby" name="201210121604.yaml20121012-932-7nn9rw.lock" scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:puppet_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1350057862.560:133): avc:  denied  { rmdir } for  pid=932 comm="ruby" name="201210121604.yaml20121012-932-7nn9rw.lock" dev="vda2" ino=146650 scontext=system_u:system_r:passenger_t:s0 tcontext=system_u:object_r:puppet_var_lib_t:s0 tclass=dir

Actions: View

Attachments on bug 848939: 605025 | 606667 | 626105 | 856689