Attachment 703504 Details for Bug 915701 – Denial with full audit logging on

Denial with full audit logging on

openshift_cron_t.txt (text/plain), 11.33 KB, created by Brenton Leanhardt on 2013-02-27 15:46:26 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Brenton Leanhardt

Created: 2013-02-27 15:46:26 UTC

Size: 11.33 KB

patch

obsolete

>type=AVC msg=audit(1361979722.007:756041873): avc:  denied  { read } for  pid=17983 comm="ruby" name="localtime" dev=xvde1 ino=260926 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:object_r:locale_t:s0 tclass=file
>type=SYSCALL msg=audit(1361979722.007:756041873): arch=c000003e syscall=2 success=no exit=-13 a0=3e6595626b a1=0 a2=1b6 a3=2 items=1 ppid=17981 pid=17983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8216 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979722.513:756041874): avc:  denied  { dac_override } for  pid=17983 comm="ruby" capability=1  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=AVC msg=audit(1361979722.513:756041874): avc:  denied  { dac_read_search } for  pid=17983 comm="ruby" capability=2  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1361979722.513:756041874): arch=c000003e syscall=6 success=no exit=-13 a0=d00d60 a1=7fff62655e10 a2=7fff62655e10 a3=2 items=2 ppid=17981 pid=17983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8216 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979722.514:756041875): avc:  denied  { dac_override } for  pid=17983 comm="ruby" capability=1  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=AVC msg=audit(1361979722.514:756041875): avc:  denied  { dac_read_search } for  pid=17983 comm="ruby" capability=2  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1361979722.514:756041875): arch=c000003e syscall=6 success=no exit=-13 a0=d010e0 a1=7fff62655e10 a2=7fff62655e10 a3=2 items=2 ppid=17981 pid=17983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8216 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979722.515:756041876): avc:  denied  { dac_override } for  pid=17983 comm="ruby" capability=1  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=AVC msg=audit(1361979722.515:756041876): avc:  denied  { dac_read_search } for  pid=17983 comm="ruby" capability=2  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1361979722.515:756041876): arch=c000003e syscall=6 success=no exit=-13 a0=d01460 a1=7fff62655e10 a2=7fff62655e10 a3=2 items=2 ppid=17981 pid=17983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8216 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979722.515:756041877): avc:  denied  { dac_override } for  pid=17983 comm="ruby" capability=1  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=AVC msg=audit(1361979722.515:756041877): avc:  denied  { dac_read_search } for  pid=17983 comm="ruby" capability=2  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1361979722.515:756041877): arch=c000003e syscall=6 success=no exit=-13 a0=cf0b00 a1=7fff62655e10 a2=7fff62655e10 a3=2 items=2 ppid=17981 pid=17983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8216 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979722.630:756041878): avc:  denied  { search } for  pid=17983 comm="ruby" name="xen" dev=proc ino=4026531928 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_xen_t:s0 tclass=dir
>type=SYSCALL msg=audit(1361979722.630:756041878): arch=c000003e syscall=4 success=no exit=-13 a0=103e280 a1=7fff6264cfb0 a2=7fff6264cfb0 a3=8 items=2 ppid=17981 pid=17983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8216 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979722.630:756041879): avc:  denied  { search } for  pid=17983 comm="ruby" name="xen" dev=proc ino=4026531928 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_xen_t:s0 tclass=dir
>type=SYSCALL msg=audit(1361979722.630:756041879): arch=c000003e syscall=4 success=no exit=-13 a0=103e3e0 a1=7fff6264cfb0 a2=7fff6264cfb0 a3=8 items=2 ppid=17981 pid=17983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8216 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979722.802:756041880): avc:  denied  { read } for  pid=17983 comm="ruby" name="localtime" dev=xvde1 ino=260926 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:object_r:locale_t:s0 tclass=file
>type=SYSCALL msg=audit(1361979722.802:756041880): arch=c000003e syscall=2 success=no exit=-13 a0=3e6595626b a1=0 a2=1b6 a3=2 items=1 ppid=17981 pid=17983 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8216 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979782.013:756041887): avc:  denied  { read } for  pid=18395 comm="ruby" name="localtime" dev=xvde1 ino=260926 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:object_r:locale_t:s0 tclass=file
>type=SYSCALL msg=audit(1361979782.013:756041887): arch=c000003e syscall=2 success=no exit=-13 a0=3e6595626b a1=0 a2=1b6 a3=2 items=1 ppid=18393 pid=18395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8217 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979782.448:756041888): avc:  denied  { dac_override } for  pid=18395 comm="ruby" capability=1  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=AVC msg=audit(1361979782.448:756041888): avc:  denied  { dac_read_search } for  pid=18395 comm="ruby" capability=2  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1361979782.448:756041888): arch=c000003e syscall=6 success=no exit=-13 a0=115d110 a1=7fffa4a9f050 a2=7fffa4a9f050 a3=2 items=2 ppid=18393 pid=18395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8217 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979782.448:756041889): avc:  denied  { dac_override } for  pid=18395 comm="ruby" capability=1  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=AVC msg=audit(1361979782.448:756041889): avc:  denied  { dac_read_search } for  pid=18395 comm="ruby" capability=2  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1361979782.448:756041889): arch=c000003e syscall=6 success=no exit=-13 a0=115d490 a1=7fffa4a9f050 a2=7fffa4a9f050 a3=2 items=2 ppid=18393 pid=18395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8217 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979782.448:756041890): avc:  denied  { dac_override } for  pid=18395 comm="ruby" capability=1  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=AVC msg=audit(1361979782.448:756041890): avc:  denied  { dac_read_search } for  pid=18395 comm="ruby" capability=2  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1361979782.448:756041890): arch=c000003e syscall=6 success=no exit=-13 a0=115d810 a1=7fffa4a9f050 a2=7fffa4a9f050 a3=2 items=2 ppid=18393 pid=18395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8217 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979782.449:756041891): avc:  denied  { dac_override } for  pid=18395 comm="ruby" capability=1  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=AVC msg=audit(1361979782.449:756041891): avc:  denied  { dac_read_search } for  pid=18395 comm="ruby" capability=2  scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tclass=capability
>type=SYSCALL msg=audit(1361979782.449:756041891): arch=c000003e syscall=6 success=no exit=-13 a0=115db90 a1=7fffa4a9f050 a2=7fffa4a9f050 a3=2 items=2 ppid=18393 pid=18395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8217 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979782.568:756041892): avc:  denied  { search } for  pid=18395 comm="ruby" name="xen" dev=proc ino=4026531928 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_xen_t:s0 tclass=dir
>type=SYSCALL msg=audit(1361979782.568:756041892): arch=c000003e syscall=4 success=no exit=-13 a0=145ef70 a1=7fffa4a961f0 a2=7fffa4a961f0 a3=8 items=2 ppid=18393 pid=18395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8217 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979782.569:756041893): avc:  denied  { search } for  pid=18395 comm="ruby" name="xen" dev=proc ino=4026531928 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:object_r:proc_xen_t:s0 tclass=dir
>type=SYSCALL msg=audit(1361979782.569:756041893): arch=c000003e syscall=4 success=no exit=-13 a0=145f0d0 a1=7fffa4a961f0 a2=7fffa4a961f0 a3=8 items=2 ppid=18393 pid=18395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8217 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)
>type=AVC msg=audit(1361979782.612:756041894): avc:  denied  { read } for  pid=18395 comm="ruby" name="localtime" dev=xvde1 ino=260926 scontext=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 tcontext=system_u:object_r:locale_t:s0 tclass=file
>type=SYSCALL msg=audit(1361979782.612:756041894): arch=c000003e syscall=2 success=no exit=-13 a0=3e6595626b a1=0 a2=1b6 a3=2 items=1 ppid=18393 pid=18395 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=8217 comm="ruby" exe="/usr/bin/ruby" subj=system_u:system_r:openshift_cron_t:s0-s0:c0.c1023 key=(null)

Actions: View

Attachments on bug 915701: 703504