Attachment 667192 Details for Bug 889120 – avc denials after proposed fix in comment #9

avc denials after proposed fix in comment #9

file_889120.txt (text/plain), 4.43 KB, created by michal novacek on 2012-12-21 11:51:13 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: michal novacek

Created: 2012-12-21 11:51:13 UTC

Size: 4.43 KB

patch

obsolete

>----
>time->Fri Dec 21 05:41:43 2012
>type=SYSCALL msg=audit(1356090103.140:4): arch=c000003e syscall=133 success=yes exit=0 a0=607720 a1=1180 a2=0 a3=7fff50304d80 items=0 ppid=1 pid=1480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="fence_sanlockd" exe="/usr/sbin/fence_sanlockd" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1356090103.140:4): avc:  denied  { create } for  pid=1480 comm="fence_sanlockd" name="fence_sanlockd.fifo" scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_run_t:s0 tclass=fifo_file
>----
>time->Fri Dec 21 05:41:48 2012
>type=SYSCALL msg=audit(1356090108.135:70): arch=c000003e syscall=21 success=no exit=-2 a0=7fe6d2733b00 a1=4 a2=7fe6d2717158 a3=0 items=0 ppid=1836 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="fence_sanlockd" exe="/usr/sbin/fence_sanlockd" subj=system_u:system_r:sanlock_exec_t:s0 key=(null)
>type=AVC msg=audit(1356090108.135:70): avc:  denied  { search } for  pid=1837 comm="fence_sanlockd" name="/" dev=dm-0 ino=2 scontext=system_u:system_r:sanlock_exec_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir
>----
>time->Fri Dec 21 05:41:48 2012
>type=SYSCALL msg=audit(1356090108.135:71): arch=c000003e syscall=2 success=yes exit=3 a0=7fe6d29318fd a1=0 a2=0 a3=646c2d6362696c67 items=0 ppid=1836 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="fence_sanlockd" exe="/usr/sbin/fence_sanlockd" subj=system_u:system_r:sanlock_exec_t:s0 key=(null)
>type=AVC msg=audit(1356090108.135:71): avc:  denied  { search } for  pid=1837 comm="fence_sanlockd" name="lib64" dev=dm-0 ino=696 scontext=system_u:system_r:sanlock_exec_t:s0 tcontext=system_u:object_r:lib_t:s0 tclass=dir
>----
>time->Fri Dec 21 05:41:48 2012
>type=SYSCALL msg=audit(1356090108.135:72): arch=c000003e syscall=2 success=yes exit=3 a0=607720 a1=80001 a2=60774b a3=7fff8d206ea0 items=0 ppid=1836 pid=1837 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="fence_sanlockd" exe="/usr/sbin/fence_sanlockd" subj=system_u:system_r:sanlock_exec_t:s0 key=(null)
>type=AVC msg=audit(1356090108.135:72): avc:  denied  { open } for  pid=1837 comm="fence_sanlockd" name="fence_sanlockd.fifo" dev=dm-0 ino=264 scontext=system_u:system_r:sanlock_exec_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=fifo_file
>type=AVC msg=audit(1356090108.135:72): avc:  denied  { write } for  pid=1837 comm="fence_sanlockd" name="fence_sanlockd.fifo" dev=dm-0 ino=264 scontext=system_u:system_r:sanlock_exec_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=fifo_file
>type=AVC msg=audit(1356090108.135:72): avc:  denied  { search } for  pid=1837 comm="fence_sanlockd" name="run" dev=dm-0 ino=39685 scontext=system_u:system_r:sanlock_exec_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir
>type=AVC msg=audit(1356090108.135:72): avc:  denied  { search } for  pid=1837 comm="fence_sanlockd" name="var" dev=dm-0 ino=16 scontext=system_u:system_r:sanlock_exec_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir
>----
>time->Fri Dec 21 05:41:48 2012
>type=SYSCALL msg=audit(1356090108.136:74): arch=c000003e syscall=42 success=yes exit=0 a0=6 a1=7fff50304f30 a2=6e a3=7fff50304cb0 items=0 ppid=1 pid=1480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="fence_sanlockd" exe="/usr/sbin/fence_sanlockd" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1356090108.136:74): avc:  denied  { connectto } for  pid=1480 comm="fence_sanlockd" path="/var/run/sanlock/sanlock.sock" scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tclass=unix_stream_socket
>----
>time->Fri Dec 21 05:41:48 2012
>type=SYSCALL msg=audit(1356090108.136:73): arch=c000003e syscall=87 success=yes exit=0 a0=607720 a1=0 a2=0 a3=7fff50304d80 items=0 ppid=1 pid=1480 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="fence_sanlockd" exe="/usr/sbin/fence_sanlockd" subj=system_u:system_r:sanlock_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1356090108.136:73): avc:  denied  { unlink } for  pid=1480 comm="fence_sanlockd" name="fence_sanlockd.fifo" dev=dm-0 ino=264 scontext=system_u:system_r:sanlock_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_run_t:s0 tclass=fifo_file

Actions: View

Attachments on bug 889120: 666562 | 666563 | 666564 | 667192