Attachment 666562 Details for Bug 889120 – AVC denials log filtered

AVC denials log filtered

ausearch-mavc-xsanlock (text/plain), 3.00 KB, created by michal novacek on 2012-12-20 09:32:48 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: michal novacek

Created: 2012-12-20 09:32:48 UTC

Size: 3.00 KB

patch

obsolete

>
>node01$ ausearch -m avc -x fence_sanlock -x sanlock 
>----
>time->Thu Dec 20 02:52:36 2012
>type=SYSCALL msg=audit(1355993556.000:7): arch=c000003e syscall=59 success=yes exit=0 a0=10c98c0 a1=10c9f50 a2=10e4fc0 a3=7fff20fd9760 items=0 ppid=1832 pid=1833 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:fenced_t:s0 key=(null)
>type=AVC msg=audit(1355993556.000:7): avc:  denied  { execute_no_trans } for  pid=1833 comm="fence_sanlock" path="/usr/sbin/sanlock" dev=dm-0 ino=607 scontext=system_u:system_r:fenced_t:s0 tcontext=system_u:object_r:sanlock_exec_t:s0 tclass=file
>type=AVC msg=audit(1355993556.000:7): avc:  denied  { open } for  pid=1833 comm="fence_sanlock" name="sanlock" dev=dm-0 ino=607 scontext=system_u:system_r:fenced_t:s0 tcontext=system_u:object_r:sanlock_exec_t:s0 tclass=file
>----
>time->Thu Dec 20 02:52:36 2012
>type=SYSCALL msg=audit(1355993556.038:54): arch=c000003e syscall=2 success=yes exit=3 a0=607720 a1=80001 a2=60774b a3=7fff4ee89ff0 items=0 ppid=1841 pid=1842 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="fence_sanlockd" exe="/usr/sbin/fence_sanlockd" subj=system_u:system_r:fenced_t:s0 key=(null)
>type=AVC msg=audit(1355993556.038:54): avc:  denied  { open } for  pid=1842 comm="fence_sanlockd" name="fence_sanlockd.fifo" dev=dm-0 ino=265 scontext=system_u:system_r:fenced_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=fifo_file
>type=AVC msg=audit(1355993556.038:54): avc:  denied  { write } for  pid=1842 comm="fence_sanlockd" name="fence_sanlockd.fifo" dev=dm-0 ino=265 scontext=system_u:system_r:fenced_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=fifo_file
>----
>time->Thu Dec 20 02:52:36 2012
>type=SYSCALL msg=audit(1355993556.045:55): arch=c000003e syscall=42 success=yes exit=0 a0=3 a1=7fff27ab6f60 a2=6e a3=7fff27ab6ce0 items=0 ppid=1844 pid=1845 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="sanlock" exe="/usr/sbin/sanlock" subj=system_u:system_r:fenced_t:s0 key=(null)
>type=AVC msg=audit(1355993556.045:55): avc:  denied  { connectto } for  pid=1845 comm="sanlock" path="/var/run/sanlock/sanlock.sock" scontext=system_u:system_r:fenced_t:s0 tcontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tclass=unix_stream_socket
>type=AVC msg=audit(1355993556.045:55): avc:  denied  { write } for  pid=1845 comm="sanlock" name="sanlock.sock" dev=dm-0 ino=261 scontext=system_u:system_r:fenced_t:s0 tcontext=system_u:object_r:sanlock_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1355993556.045:55): avc:  denied  { dac_override } for  pid=1845 comm="sanlock" capability=1  scontext=system_u:system_r:fenced_t:s0 tcontext=system_u:system_r:fenced_t:s0 tclass=capability
>type=AVC msg=audit(1355993556.045:55): avc:  denied  { search } for  pid=1845 comm="sanlock" name="sanlock" dev=dm-0 ino=55917 scontext=system_u:system_r:fenced_t:s0 tcontext=system_u:object_r:sanlock_var_run_t:s0 tclass=dir
>

Actions: View

Attachments on bug 889120: 666562 | 666563 | 666564 | 667192