Attachment 703175 Details for Bug 914862 – ausearch -m avc -ts recent

ausearch -m avc -ts recent

try1.log (text/x-log), 11.90 KB, created by I. Piasecki on 2013-02-26 23:10:17 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: I. Piasecki

Created: 2013-02-26 23:10:17 UTC

Size: 11.90 KB

patch

obsolete

>----
>time->Wed Feb 27 00:00:01 2013
>type=SYSCALL msg=audit(1361919601.656:726): arch=c000003e syscall=9 success=no exit=-13 a0=321c8ca000 a1=3d000 a2=7 a3=812 items=0 ppid=12494 pid=12495 auid=990 uid=990 gid=987 euid=990 suid=990 fsuid=990 egid=987 sgid=987 fsgid=987 ses=77 tty=(none) comm="munin-update" exe="/usr/bin/perl" subj=system_u:system_r:munin_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361919601.656:726): avc:  denied  { execmem } for  pid=12495 comm="munin-update" scontext=system_u:system_r:munin_t:s0-s0:c0.c1023 tcontext=system_u:system_r:munin_t:s0-s0:c0.c1023 tclass=process
>----
>time->Wed Feb 27 00:03:50 2013
>type=SYSCALL msg=audit(1361919830.501:738): arch=c000003e syscall=83 success=yes exit=0 a0=25d9a60 a1=1ff a2=322135fa3c a3=0 items=0 ppid=1929 pid=12715 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919830.501:738): avc:  denied  { create } for  pid=12715 comm="munin-cgi-graph" name="munin-cgi-graph" scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1361919830.501:738): avc:  denied  { add_name } for  pid=12715 comm="munin-cgi-graph" name="munin-cgi-graph" scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>type=AVC msg=audit(1361919830.501:738): avc:  denied  { write } for  pid=12715 comm="munin-cgi-graph" name="systemd-private-u5Wnf6" dev="md2" ino=5244465 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>----
>time->Wed Feb 27 00:03:50 2013
>type=SYSCALL msg=audit(1361919830.453:737): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7fff7d3775a0 a3=50 items=0 ppid=1929 pid=12715 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919830.453:737): avc:  denied  { ioctl } for  pid=12715 comm="munin-cgi-graph" path="/var/log/munin/munin-cgi-graph.log" dev="md2" ino=5242929 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:munin_log_t:s0 tclass=file
>----
>time->Wed Feb 27 00:03:50 2013
>type=SYSCALL msg=audit(1361919830.511:739): arch=c000003e syscall=2 success=yes exit=4 a0=7fc3044eb6ca a1=80000 a2=1b6 a3=238 items=0 ppid=1929 pid=12715 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919830.511:739): avc:  denied  { open } for  pid=12715 comm="munin-cgi-graph" path="/etc/passwd" dev="md2" ino=7999038 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1361919830.511:739): avc:  denied  { read } for  pid=12715 comm="munin-cgi-graph" name="passwd" dev="md2" ino=7999038 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>----
>time->Wed Feb 27 00:03:50 2013
>type=SYSCALL msg=audit(1361919830.518:740): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff7d3737e0 a2=7fff7d3737e0 a3=0 items=0 ppid=1929 pid=12715 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919830.518:740): avc:  denied  { getattr } for  pid=12715 comm="munin-cgi-graph" path="/etc/passwd" dev="md2" ino=7999038 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>----
>time->Wed Feb 27 00:03:50 2013
>type=SYSCALL msg=audit(1361919830.884:741): arch=c000003e syscall=2 success=yes exit=4 a0=7fff7d3747a0 a1=241 a2=1b6 a3=238 items=0 ppid=1929 pid=12715 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919830.884:741): avc:  denied  { write open } for  pid=12715 comm="munin-cgi-graph" path="/var/tmp/munin-cgi-graph/localhost/localhost/diskstats_iops/mapper_loop1-pinpoint=1361478010,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" dev="md2" ino=5244477 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=AVC msg=audit(1361919830.884:741): avc:  denied  { create } for  pid=12715 comm="munin-cgi-graph" name="mapper_loop1-pinpoint=1361478010,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>----
>time->Wed Feb 27 00:03:50 2013
>type=SYSCALL msg=audit(1361919830.954:742): arch=c000003e syscall=235 success=yes exit=0 a0=25d6950 a1=7fff7d3779d0 a2=4000 a3=fffffffffff8d4d4 items=0 ppid=1929 pid=12715 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919830.954:742): avc:  denied  { setattr } for  pid=12715 comm="munin-cgi-graph" name="mapper_loop1-pinpoint=1361478010,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" dev="md2" ino=5244477 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>----
>time->Wed Feb 27 00:03:50 2013
>type=SYSCALL msg=audit(1361919830.958:743): arch=c000003e syscall=87 success=yes exit=0 a0=2580520 a1=2501a68 a2=fffffffffffb46c9 a3=fffffffffff8d4d4 items=0 ppid=1929 pid=12715 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919830.958:743): avc:  denied  { unlink } for  pid=12715 comm="munin-cgi-graph" name="mapper_loop1-pinpoint=1361478010,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" dev="md2" ino=5244477 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=AVC msg=audit(1361919830.958:743): avc:  denied  { remove_name } for  pid=12715 comm="munin-cgi-graph" name="mapper_loop1-pinpoint=1361478010,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" dev="md2" ino=5244477 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=dir
>----
>time->Wed Feb 27 00:05:01 2013
>type=SYSCALL msg=audit(1361919901.895:749): arch=c000003e syscall=9 success=no exit=-13 a0=321c8ca000 a1=3d000 a2=7 a3=812 items=0 ppid=12860 pid=12861 auid=990 uid=990 gid=987 euid=990 suid=990 fsuid=990 egid=987 sgid=987 fsgid=987 ses=79 tty=(none) comm="munin-update" exe="/usr/bin/perl" subj=system_u:system_r:munin_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361919901.895:749): avc:  denied  { execmem } for  pid=12861 comm="munin-update" scontext=system_u:system_r:munin_t:s0-s0:c0.c1023 tcontext=system_u:system_r:munin_t:s0-s0:c0.c1023 tclass=process
>----
>time->Wed Feb 27 00:05:07 2013
>type=SYSCALL msg=audit(1361919907.631:753): arch=c000003e syscall=2 success=yes exit=4 a0=7fd0ef6426ca a1=80000 a2=1b6 a3=238 items=0 ppid=1932 pid=12877 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919907.631:753): avc:  denied  { open } for  pid=12877 comm="munin-cgi-graph" path="/etc/passwd" dev="md2" ino=7999038 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1361919907.631:753): avc:  denied  { read } for  pid=12877 comm="munin-cgi-graph" name="passwd" dev="md2" ino=7999038 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>----
>time->Wed Feb 27 00:05:07 2013
>type=SYSCALL msg=audit(1361919907.418:752): arch=c000003e syscall=16 success=no exit=-25 a0=3 a1=5401 a2=7fff3c08e360 a3=50 items=0 ppid=1932 pid=12877 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919907.418:752): avc:  denied  { ioctl } for  pid=12877 comm="munin-cgi-graph" path="/var/log/munin/munin-cgi-graph.log" dev="md2" ino=5242929 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:munin_log_t:s0 tclass=file
>----
>time->Wed Feb 27 00:05:07 2013
>type=SYSCALL msg=audit(1361919907.631:754): arch=c000003e syscall=5 success=yes exit=0 a0=4 a1=7fff3c08a5a0 a2=7fff3c08a5a0 a3=0 items=0 ppid=1932 pid=12877 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919907.631:754): avc:  denied  { getattr } for  pid=12877 comm="munin-cgi-graph" path="/etc/passwd" dev="md2" ino=7999038 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>----
>time->Wed Feb 27 00:05:07 2013
>type=SYSCALL msg=audit(1361919907.878:755): arch=c000003e syscall=2 success=yes exit=4 a0=7fff3c08b560 a1=241 a2=1b6 a3=238 items=0 ppid=1932 pid=12877 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919907.878:755): avc:  denied  { write open } for  pid=12877 comm="munin-cgi-graph" path="/var/tmp/munin-cgi-graph/localhost/localhost/diskstats_iops/md2-pinpoint=1360894810,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" dev="md2" ino=5244477 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>type=AVC msg=audit(1361919907.878:755): avc:  denied  { create } for  pid=12877 comm="munin-cgi-graph" name="md2-pinpoint=1360894810,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>----
>time->Wed Feb 27 00:05:07 2013
>type=SYSCALL msg=audit(1361919907.924:756): arch=c000003e syscall=235 success=yes exit=0 a0=30e45c0 a1=7fff3c08e790 a2=4000 a3=fffffffffff8d4d4 items=0 ppid=1932 pid=12877 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919907.924:756): avc:  denied  { setattr } for  pid=12877 comm="munin-cgi-graph" name="md2-pinpoint=1360894810,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" dev="md2" ino=5244477 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file
>----
>time->Wed Feb 27 00:05:07 2013
>type=SYSCALL msg=audit(1361919907.932:757): arch=c000003e syscall=87 success=yes exit=0 a0=308e390 a1=300f968 a2=fffffffffffb46c9 a3=fffffffffff8d4d4 items=0 ppid=1932 pid=12877 auid=4294967295 uid=48 gid=48 euid=48 suid=48 fsuid=48 egid=48 sgid=48 fsgid=48 ses=4294967295 tty=(none) comm="munin-cgi-graph" exe="/usr/bin/perl" subj=system_u:system_r:httpd_munin_script_t:s0 key=(null)
>type=AVC msg=audit(1361919907.932:757): avc:  denied  { unlink } for  pid=12877 comm="munin-cgi-graph" name="md2-pinpoint=1360894810,1361586010.png?&lower_limit=&upper_limit=&size_x=800&size_y=400" dev="md2" ino=5244477 scontext=system_u:system_r:httpd_munin_script_t:s0 tcontext=system_u:object_r:tmp_t:s0 tclass=file

Actions: View

Attachments on bug 914862: 703175 | 703178