Attachment 653654 Details for Bug 881339 – AVCs on boot

AVCs on boot

boot_avcs.txt (text/plain), 7.25 KB, created by Robin Powell on 2012-11-28 18:27:07 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Robin Powell

Created: 2012-11-28 18:27:07 UTC

Size: 7.25 KB

patch

obsolete

>This is in "single" mode, but they're the same on a normal boot.
>
>Welcome to Fedora 17 (Beefy Miracle)!
>
>[    6.018999] systemd[1]: Set hostname to <stodi.digitalkingdom.org>.
>[  OK  ] Listening on /dev/initctl Compatibility Named Pipe.
>[  OK  ] Listening on Delayed Shutdown Socket.
>[  OK  ] Listening on Device-mapper event daemon FIFOs.
>[  OK  ] Reached target Encrypted Volumes.
>[  OK  ] Set up automount Arbitrary Executable File Formats F...utomount Point.
>         Expecting device dev-disk-by\x2duuid-11e075be\x2d2ea...9eb6a.device...
>[  OK  ] Listening on udev Kernel Socket.
>[  OK  ] Listening on udev Control Socket.
>         Expecting device dev-disk-by\x2duuid-7193a328\x2da59...a1c0d.device...
>         Expecting device dev-disk-by\x2duuid-d64873e0\x2db2c...1bf3e.device...
>         Expecting device dev-disk-by\x2duuid-b9f4f01a\x2d99b...cfd05.device...
>[  OK  ] Listening on Journal Socket.
>         Starting Configure read-only root support...
>         Mounting Media Directory...
>[    7.095477] type=1400 audit(1354126768.096:4): avc:  denied  { read } for  pid=1 comm="systemd" name="media" dev="vda2" ino=393230 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:mnt_t:s0 tclass=dir
>[    7.103512] systemd[1]: media.mount: Directory /media to mount over is not empty, mounting anyway. (To see the over-mounted files, please manually mount the underlying file system to a secondary location.)
>         Mounting POSIX Message Queue File System...
>         Starting Journal Service...
>[  OK  ] Started Journal Service.
>[    7.377064] systemd-journald[253]: Fixed max_use=95.4M max_size=11.9M min_size=64.0K keep_free=47.7M
>[    7.408001] systemd-journald[253]: Vacuuming...
>         Mounting Huge Pages File System...
>         Mounting Configuration File System...
>         Mounting Debug File System...
>         Starting Remount Root and Kernel File Systems...
>         Starting Apply Kernel Variables...
>         Starting Setup Virtual Console...
>         Starting udev Kernel Device Manager...
>         Starting udev Coldplug all Devices...
>[  OK  ] Started udev Coldplug all Devices.
>         Starting udev Wait for Complete Device Initialization...
>[  OK  ] Mounted Debug File System.
>[  OK  ] Mounted Media Directory.
>[    7.824188] type=1400 audit(1354126768.825:5): avc:  denied  { write } for  pid=259 comm="systemd-sysctl" name="overcommit_memory" dev="proc" ino=8653 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=file
>[    7.847079] type=1400 audit(1354126768.848:6): avc:  denied  { write } for  pid=259 comm="systemd-sysctl" name="zone_reclaim_mode" dev="proc" ino=8665 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:sysctl_vm_t:s0 tclass=file
>[    7.938337] udevd[261]: starting version 182
>[  OK  ] Mounted Configuration File System.
>[  OK  ] Mounted Huge Pages File System.
>[  OK  ] Mounted POSIX Message Queue File System.
>[  OK  ] Started udev Kernel Device Manager.
>[FAILED] Failed to start Apply Kernel Variables.
>         See 'systemctl status systemd-sysctl.service' for details.
>[    8.269846] EXT4-fs (vda2): re-mounted. Opts: (null)
>[  OK  ] Started Remount Root and Kernel File Systems.
>[  OK  ] Reached target Local File Systems (Pre).
>         Starting Load Random Seed...
>[  OK  ] Started Load Random Seed.
>[  OK  ] Started Configure read-only root support.
>[  OK  ] Started udev Wait for Complete Device Initialization.
>         Starting Wait for storage scan...
>[  OK  ] Started Setup Virtual Console.
>[  OK  ] Started Wait for storage scan.
>         Starting Initialize storage subsystems (RAID, LVM, etc.)...
>[  OK  ] Started Initialize storage subsystems (RAID, LVM, etc.).
>         Starting Initialize storage subsystems (RAID, LVM, etc.)...
>[  OK  ] Started Initialize storage subsystems (RAID, LVM, etc.).
>[    9.450564] microcode: CPU0 sig=0x623, pf=0x0, revision=0x1
>[    9.724339] piix4_smbus 0000:00:01.3: SMBus Host Controller at 0xb100, revision 0
>[    9.879134] microcode: Microcode Update Driver: v2.00 <tigran@aivazian.fsnet.co.uk>, Peter Oruba
>[  OK  ] Found device /dev/disk/by-uuid/11e075be-2ea0-441f-a3f5-492f6339eb6a.
>         Activating swap /dev/disk/by-uuid/11e075be-2ea0-441f...492f6339eb6a...
>[  OK  ] Found device /dev/disk/by-uuid/d64873e0-b2c6-4f7a-b9c4-e52ce6c1bf3e.
>         Starting File System Check on /dev/disk/by-uuid/d648...e52ce6c1bf3e...
>[   10.392732] Adding 2096124k swap on /dev/vdc1.  Priority:0 extents:1 across:2096124k
>[  OK  ] Activated swap /dev/disk/by-uuid/11e075be-2ea0-441f-a3f5-492f6339eb6a.
>[  OK  ] Reached target Swap.
>[  OK  ] Found device /dev/disk/by-uuid/b9f4f01a-99bf-496e-b761-eb50f4dcfd05.
>         Starting File System Check on /dev/disk/by-uuid/b9f4...eb50f4dcfd05...
>[  OK  ] Found device /dev/disk/by-uuid/7193a328-a590-41ed-a70a-c872ca1a1c0d.
>         Starting File System Check on /dev/disk/by-uuid/7193...c872ca1a1c0d...
>systemd-fsck[390]: /dev/vda1: clean, 275/32768 files, 19129/131072 blocks
>systemd-fsck[387]: /dev/vdd1: clean, 927863/6553600 files, 13899793/26214392 blocks
>systemd-fsck[383]: /dev/vdb1: clean, 310863/2620160 files, 1246947/2621184 blocks
>[  OK  ] Started File System Check on /dev/disk/by-uuid/d6487...4-e52ce6c1bf3e.
>         Mounting /srv...
>[   11.088081] type=1400 audit(1354126772.089:7): avc:  denied  { read } for  pid=1 comm="systemd" name="home" dev="vda2" ino=262153 scontext=system_u:system_r:init_t:s0 tcontext=staff_u:object_r:default_t:s0 tclass=dir
>[  OK  ] Started File System Check on /dev/disk/by-uuid/b9f4f...1-eb50f4dcfd05.
>         Mounting /home...
>[  OK  ] Started File System Check on /dev/disk/by-uuid/7193a...a-c872ca1a1c0d.
>         Mounting /boot...
>[   11.132426] type=1400 audit(1354126772.133:8): avc:  denied  { read } for  pid=1 comm="systemd" name="boot" dev="vda2" ino=131073 scontext=system_u:system_r:init_t:s0 tcontext=system_u:object_r:boot_t:s0 tclass=dir
>[   11.246732] EXT4-fs (vda1): mounted filesystem with ordered data mode. Opts: (null)
>[  OK  ] Mounted /boot.
>[   11.285075] EXT4-fs (vdb1): mounted filesystem with ordered data mode. Opts: (null)
>[   11.290383] EXT4-fs (vdd1): mounted filesystem with ordered data mode. Opts: (null)
>[  OK  ] Mounted /home.
>[  OK  ] Mounted /srv.
>[  OK  ] Reached target Local File Systems.
>         Starting Tell Plymouth To Write Out Runtime Data...
>         Starting Recreate Volatile Files and Directories...
>[  OK  ] Started Tell Plymouth To Write Out Runtime Data.
>[  OK  ] Started Recreate Volatile Files and Directories.
>[  OK  ] Reached target System Initialization.
>         Starting Console System Startup Logging...
>[  OK  ] Listening on RPCbind Server Activation Socket.
>[  OK  ] Listening on PC/SC Smart Card Daemon Activation Socket.
>[  OK  ] Listening on Avahi mDNS/DNS-SD Stack Activation Socket.
>[  OK  ] Listening on D-Bus System Message Bus Socket.
>[  OK  ] Reached target Sockets.
>[  OK  ] Reached target Basic System.
>         Starting IPv4 firewall with iptables...
>         Starting Rescue Shell...
>[  OK  ] Started Rescue Shell.
>[  OK  ] Reached target Rescue Mode.
>[   12.405576] nf_conntrack version 0.5.0 (16384 buckets, 65536 max)
>Welcome to rescue mode! Type "systemctl default" or ^D to enter default mode.
>Type "journalctl" to view system logs. Type "systemctl reboot" to reboot.
>root@stodi#
>

Actions: View

Attachments on bug 881339: 653654