Attachment 627924 Details for Bug 863864 – Output of ausearch -m avc -ts recent directly after s-c-kdump SELinux denials

Output of ausearch -m avc -ts recent directly after s-c-kdump SELinux denials

ausearchoutput.txt (text/plain), 8.75 KB, created by Adam Joseph Cook on 2012-10-16 03:17:26 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Joseph Cook

Created: 2012-10-16 03:17:26 UTC

Size: 8.75 KB

patch

obsolete

>----
>time->Mon Oct 15 19:59:18 2012
>type=SYSCALL msg=audit(1350349158.927:323): arch=c000003e syscall=101 success=no exit=-13 a0=10 a1=3d9 a2=0 a3=0 items=0 ppid=3431 pid=3432 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gdb" exe="/usr/bin/gdb" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350349158.927:323): avc:  denied  { ptrace } for  pid=3432 comm="gdb" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>----
>time->Mon Oct 15 20:10:37 2012
>type=SYSCALL msg=audit(1350349837.359:372): arch=c000003e syscall=101 success=no exit=-13 a0=10 a1=3ba a2=0 a3=0 items=0 ppid=3735 pid=3739 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="gdb" exe="/usr/bin/gdb" subj=system_u:system_r:xdm_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350349837.359:372): avc:  denied  { ptrace } for  pid=3739 comm="gdb" scontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:xdm_t:s0-s0:c0.c1023 tclass=process
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.196:346): arch=c000003e syscall=4 success=no exit=-13 a0=7fff977fe050 a1=7fff977fdfc0 a2=7fff977fdfc0 a3=3 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.196:346): avc:  denied  { getattr } for  pid=2288 comm="grubby" path="/dev/sr0" dev="devtmpfs" ino=8068 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:removable_device_t:s0 tclass=blk_file
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.197:347): arch=c000003e syscall=4 success=no exit=-13 a0=7fff977fcf60 a1=7fff977fce80 a2=7fff977fce80 a3=14 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.197:347): avc:  denied  { getattr } for  pid=2288 comm="grubby" path="/dev/sr0" dev="devtmpfs" ino=8068 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:removable_device_t:s0 tclass=blk_file
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.198:348): arch=c000003e syscall=262 success=no exit=-13 a0=4 a1=17a3b9b a2=7fff977fce70 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.198:348): avc:  denied  { getattr } for  pid=2288 comm="grubby" path="/dev/sr0" dev="devtmpfs" ino=8068 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:removable_device_t:s0 tclass=blk_file
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.199:349): arch=c000003e syscall=262 success=no exit=-13 a0=4 a1=17a3d53 a2=7fff977fce70 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.199:349): avc:  denied  { getattr } for  pid=2288 comm="grubby" path="/dev/sr0" dev="devtmpfs" ino=8068 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:removable_device_t:s0 tclass=blk_file
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.199:350): arch=c000003e syscall=262 success=no exit=-13 a0=4 a1=17a3f6b a2=7fff977fce70 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.199:350): avc:  denied  { getattr } for  pid=2288 comm="grubby" path="/proc/kcore" dev="proc" ino=4026532031 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_kcore_t:s0 tclass=file
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.202:351): arch=c000003e syscall=262 success=no exit=-13 a0=4 a1=17a3a7b a2=7fff977fce70 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.202:351): avc:  denied  { getattr } for  pid=2288 comm="grubby" path="/dev/sr0" dev="devtmpfs" ino=8068 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:removable_device_t:s0 tclass=blk_file
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.202:352): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=179e180 a2=90800 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.202:352): avc:  denied  { read } for  pid=2288 comm="grubby" name="/" dev="mqueue" ino=7339 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.202:353): arch=c000003e syscall=257 success=no exit=-13 a0=ffffffffffffff9c a1=179e140 a2=90800 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.202:353): avc:  denied  { read } for  pid=2288 comm="grubby" name="/" dev="hugetlbfs" ino=9993 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:hugetlbfs_t:s0 tclass=dir
>----
>time->Mon Oct 15 17:03:15 2012
>type=SYSCALL msg=audit(1350338595.533:345): arch=c000003e syscall=144 success=no exit=-13 a0=8ed a1=0 a2=7fff15976fb0 a3=1 items=0 ppid=2284 pid=2285 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="system-config-k" exe="/usr/bin/python2.7" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338595.533:345): avc:  denied  { setsched } for  pid=2285 comm="system-config-k" scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tclass=process
>type=AVC msg=audit(1350338595.533:345): avc:  denied  { sys_nice } for  pid=2285 comm="system-config-k" capability=23  scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tclass=capability
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.203:354): arch=c000003e syscall=262 success=no exit=-13 a0=4 a1=17a3c53 a2=7fff977fce70 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.203:354): avc:  denied  { getattr } for  pid=2288 comm="grubby" path="/dev/sr0" dev="devtmpfs" ino=8068 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:removable_device_t:s0 tclass=blk_file
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.203:355): arch=c000003e syscall=262 success=no exit=-13 a0=4 a1=17a3c83 a2=7fff977fce70 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.203:355): avc:  denied  { getattr } for  pid=2288 comm="grubby" path="/dev/sr0" dev="devtmpfs" ino=8068 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:removable_device_t:s0 tclass=blk_file
>----
>time->Mon Oct 15 17:03:16 2012
>type=SYSCALL msg=audit(1350338596.203:356): arch=c000003e syscall=83 success=no exit=-13 a0=3b5ae25b4b a1=1ed a2=ffffffffffffff70 a3=0 items=0 ppid=2285 pid=2288 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="grubby" exe="/usr/sbin/grubby" subj=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1350338596.203:356): avc:  denied  { write } for  pid=2288 comm="grubby" name="/" dev="tmpfs" ino=1187 scontext=system_u:system_r:kdumpgui_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_run_t:s0 tclass=dir

Actions: View

Attachments on bug 863864: 623159 | 623160 | 627924