Attachment 649380 Details for Bug 879007 – output of ausearch -m AVC -ts today

output of ausearch -m AVC -ts today

audit-log-today.txt (text/plain), 13.85 KB, created by Matěj Cepl on 2012-11-21 19:27:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Matěj Cepl

Created: 2012-11-21 19:27:30 UTC

Size: 13.85 KB

patch

obsolete

>----
>time->Wed Nov 21 14:15:27 2012
>type=SYSCALL msg=audit(1353503727.063:14588): arch=40000003 syscall=11 success=yes exit=0 a0=3b82bb a1=15dfef8 a2=15df6d0 a3=15dfc40 items=0 ppid=14051 pid=14093 auid=500 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=1349 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null)
>type=AVC msg=audit(1353503727.063:14588): avc:  denied  { read write } for  pid=14093 comm="suexec" path=2F746D702F2E4E5350522D41464D2D31323931302D313334626464382E30202864656C6574656429 dev=dm-0 ino=655371 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_tmp_t:s0 tclass=file
>----
>time->Wed Nov 21 14:15:30 2012
>type=SYSCALL msg=audit(1353503730.384:14589): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf9cb9a4 a2=963ff4 a3=ffffffc8 items=0 ppid=14093 pid=14098 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503730.384:14589): avc:  denied  { write } for  pid=14098 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:15:30 2012
>type=SYSCALL msg=audit(1353503730.391:14590): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf9cbdf4 a2=963ff4 a3=ffffffc8 items=0 ppid=14093 pid=14098 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503730.391:14590): avc:  denied  { write } for  pid=14098 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:15:37 2012
>type=SYSCALL msg=audit(1353503737.167:14592): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf997824 a2=5b0ff4 a3=ffffffc8 items=0 ppid=14099 pid=14102 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503737.167:14592): avc:  denied  { write } for  pid=14102 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:15:37 2012
>type=SYSCALL msg=audit(1353503737.170:14593): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf997c74 a2=5b0ff4 a3=ffffffc8 items=0 ppid=14099 pid=14102 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503737.170:14593): avc:  denied  { write } for  pid=14102 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:15:36 2012
>type=SYSCALL msg=audit(1353503736.160:14591): arch=40000003 syscall=11 success=yes exit=0 a0=3b82bb a1=14b4778 a2=15e8bb8 a3=14b44c0 items=0 ppid=14050 pid=14099 auid=500 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=1349 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null)
>type=AVC msg=audit(1353503736.160:14591): avc:  denied  { read write } for  pid=14099 comm="suexec" path=2F746D702F2E4E5350522D41464D2D31323931302D313334626464382E30202864656C6574656429 dev=dm-0 ino=655371 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_tmp_t:s0 tclass=file
>----
>time->Wed Nov 21 14:15:51 2012
>type=SYSCALL msg=audit(1353503751.574:14594): arch=40000003 syscall=11 success=yes exit=0 a0=3b82bb a1=15db7a8 a2=15daf28 a3=15db4f0 items=0 ppid=14110 pid=14111 auid=500 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=1349 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null)
>type=AVC msg=audit(1353503751.574:14594): avc:  denied  { read write } for  pid=14111 comm="suexec" path=2F746D702F2E4E5350522D41464D2D31323931302D313334626464382E30202864656C6574656429 dev=dm-0 ino=655371 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_tmp_t:s0 tclass=file
>----
>time->Wed Nov 21 14:15:54 2012
>type=SYSCALL msg=audit(1353503754.260:14595): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8d72a4 a2=fb2ff4 a3=ffffffc8 items=0 ppid=14111 pid=14115 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503754.260:14595): avc:  denied  { write } for  pid=14115 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:15:54 2012
>type=SYSCALL msg=audit(1353503754.266:14596): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bf8d76f4 a2=fb2ff4 a3=ffffffc8 items=0 ppid=14111 pid=14115 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503754.266:14596): avc:  denied  { write } for  pid=14115 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:15:54 2012
>type=SYSCALL msg=audit(1353503754.538:14597): arch=40000003 syscall=11 success=yes exit=0 a0=3b82bb a1=14b4800 a2=18655b8 a3=14b4548 items=0 ppid=14106 pid=14116 auid=500 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=1349 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null)
>type=AVC msg=audit(1353503754.538:14597): avc:  denied  { read write } for  pid=14116 comm="suexec" path=2F746D702F2E4E5350522D41464D2D31323931302D313334626464382E30202864656C6574656429 dev=dm-0 ino=655371 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_tmp_t:s0 tclass=file
>----
>time->Wed Nov 21 14:15:54 2012
>type=SYSCALL msg=audit(1353503754.549:14598): arch=40000003 syscall=11 success=yes exit=0 a0=3b82bb a1=15db7b0 a2=15daf28 a3=15db4f8 items=0 ppid=14109 pid=14117 auid=500 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=1349 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null)
>type=AVC msg=audit(1353503754.549:14598): avc:  denied  { read write } for  pid=14117 comm="suexec" path=2F746D702F2E4E5350522D41464D2D31323931302D313334626464382E30202864656C6574656429 dev=dm-0 ino=655371 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_tmp_t:s0 tclass=file
>----
>time->Wed Nov 21 14:16:41 2012
>type=SYSCALL msg=audit(1353503801.039:14599): arch=40000003 syscall=11 success=yes exit=0 a0=3b82bb a1=14b47b0 a2=b4b4f040 a3=14b44f8 items=0 ppid=14108 pid=14132 auid=500 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=1349 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null)
>type=AVC msg=audit(1353503801.039:14599): avc:  denied  { read write } for  pid=14132 comm="suexec" path=2F746D702F2E4E5350522D41464D2D31323931302D313334626464382E30202864656C6574656429 dev=dm-0 ino=655371 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_tmp_t:s0 tclass=file
>----
>time->Wed Nov 21 14:16:43 2012
>type=SYSCALL msg=audit(1353503803.250:14600): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfaa00c4 a2=2a1ff4 a3=ffffffc8 items=0 ppid=14132 pid=14143 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503803.250:14600): avc:  denied  { write } for  pid=14143 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:16:43 2012
>type=SYSCALL msg=audit(1353503803.251:14601): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfaa0514 a2=2a1ff4 a3=ffffffc8 items=0 ppid=14132 pid=14143 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503803.251:14601): avc:  denied  { write } for  pid=14143 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:16:47 2012
>type=SYSCALL msg=audit(1353503807.317:14604): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff49c84 a2=2cbff4 a3=ffffffc8 items=0 ppid=14147 pid=14150 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503807.317:14604): avc:  denied  { write } for  pid=14150 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:16:47 2012
>type=SYSCALL msg=audit(1353503807.388:14605): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb82fd4 a2=45bff4 a3=ffffffc8 items=0 ppid=14147 pid=14151 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503807.388:14605): avc:  denied  { write } for  pid=14151 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:16:45 2012
>type=SYSCALL msg=audit(1353503805.599:14602): arch=40000003 syscall=11 success=yes exit=0 a0=3b82bb a1=15db7a8 a2=15daf28 a3=15db4f0 items=0 ppid=14119 pid=14147 auid=500 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=1349 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null)
>type=AVC msg=audit(1353503805.599:14602): avc:  denied  { read write } for  pid=14147 comm="suexec" path=2F746D702F2E4E5350522D41464D2D31323931302D313334626464382E30202864656C6574656429 dev=dm-0 ino=655371 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_tmp_t:s0 tclass=file
>----
>time->Wed Nov 21 14:16:47 2012
>type=SYSCALL msg=audit(1353503807.315:14603): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bff49834 a2=2cbff4 a3=ffffffc8 items=0 ppid=14147 pid=14150 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503807.315:14603): avc:  denied  { write } for  pid=14150 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 14:16:47 2012
>type=SYSCALL msg=audit(1353503807.393:14606): arch=40000003 syscall=102 success=no exit=-13 a0=3 a1=bfb83424 a2=45bff4 a3=ffffffc8 items=0 ppid=14147 pid=14151 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353503807.393:14606): avc:  denied  { write } for  pid=14151 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file
>----
>time->Wed Nov 21 15:56:56 2012
>type=SYSCALL msg=audit(1353509816.481:14659): arch=40000003 syscall=11 success=yes exit=0 a0=3b82bb a1=15e4be8 a2=15e43c0 a3=15e4930 items=0 ppid=14105 pid=20717 auid=500 uid=48 gid=48 euid=0 suid=0 fsuid=0 egid=48 sgid=48 fsgid=48 tty=(none) ses=1349 comm="suexec" exe="/usr/sbin/suexec" subj=unconfined_u:system_r:httpd_suexec_t:s0 key=(null)
>type=AVC msg=audit(1353509816.481:14659): avc:  denied  { read write } for  pid=20717 comm="suexec" path=2F746D702F2E4E5350522D41464D2D31323931302D313334626464382E30202864656C6574656429 dev=dm-0 ino=655371 scontext=unconfined_u:system_r:httpd_suexec_t:s0 tcontext=unconfined_u:object_r:httpd_tmp_t:s0 tclass=file
>----
>time->Wed Nov 21 15:56:59 2012
>type=SYSCALL msg=audit(1353509819.133:14660): arch=40000003 syscall=102 success=yes exit=0 a0=3 a1=bfe68fb4 a2=542ff4 a3=ffffffc8 items=0 ppid=20717 pid=20761 auid=500 uid=600 gid=502 euid=600 suid=600 fsuid=600 egid=502 sgid=502 fsgid=502 tty=(none) ses=1349 comm="dspam_admin" exe="/usr/bin/dspam_admin" subj=unconfined_u:system_r:httpd_sys_script_t:s0 key=(null)
>type=AVC msg=audit(1353509819.133:14660): avc:  denied  { sendto } for  pid=20761 comm="dspam_admin" path="/dev/log" scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:system_r:syslogd_t:s0 tclass=unix_dgram_socket
>type=AVC msg=audit(1353509819.133:14660): avc:  denied  { write } for  pid=20761 comm="dspam_admin" name="log" dev=devtmpfs ino=10373 scontext=unconfined_u:system_r:httpd_sys_script_t:s0 tcontext=system_u:object_r:devlog_t:s0 tclass=sock_file

Actions: View

Attachments on bug 879007: 649380