Attachment 704049 Details for Bug 916816 – AVCs generated by fail2ban iptables action

AVCs generated by fail2ban iptables action

fail2ban-avc.log (text/x-log), 3.88 KB, created by Phil Anderson on 2013-03-01 03:00:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Phil Anderson

Created: 2013-03-01 03:00:21 UTC

Size: 3.88 KB

patch

obsolete

>denied  { create } for  pid=12345 comm="iptables" scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:system_r:fail2ban_t:s0 tclass=rawip_socket
>denied  { create } for  pid=12345 comm="iptables" scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=unconfined_u:system_r:fail2ban_t:s0 tclass=rawip_socket
>denied  { execute } for  pid=12345 comm="iptables" name="modprobe" dev=dm-0 ino=418464 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=file
>denied  { execute_no_trans } for  pid=12345 comm="iptables" path="/sbin/modprobe" dev=dm-0 ino=418464 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=file
>denied  { getopt } for  pid=12345 comm="iptables" lport=255 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=unconfined_u:system_r:fail2ban_t:s0 tclass=rawip_socket
>denied  { net_admin } for  pid=12345 comm="iptables" capability=12  scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=unconfined_u:system_r:fail2ban_t:s0 tclass=capability
>denied  { net_raw } for  pid=12345 comm="iptables" capability=13  scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=unconfined_u:system_r:fail2ban_t:s0 tclass=capability
>denied  { open } for  pid=12345 comm="modprobe" name="modprobe.d" dev=dm-0 ino=131083 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=dir
>denied  { read } for  pid=12345 comm="iptables" scontext=system_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:sysctl_modprobe_t:s0 tclass=file
>denied  { read } for  pid=12345 comm="iptables" scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:sysctl_modprobe_t:s0 tclass=file
>denied  { read } for  pid=12345 comm="modprobe" name="anaconda.conf" dev=dm-0 ino=131087 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=file
>denied  { read } for  pid=12345 comm="modprobe" name="blacklist.conf" dev=dm-0 ino=131330 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=file
>denied  { read } for  pid=12345 comm="modprobe" name="blacklist-kvm.conf" dev=dm-0 ino=132259 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=file
>denied  { read } for  pid=12345 comm="modprobe" name="dist-alsa.conf" dev=dm-0 ino=131286 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=file
>denied  { read } for  pid=12345 comm="modprobe" name="dist.conf" dev=dm-0 ino=131184 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=file
>denied  { read } for  pid=12345 comm="modprobe" name="dist-oss.conf" dev=dm-0 ino=135063 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=file
>denied  { read } for  pid=12345 comm="modprobe" name="modprobe.d" dev=dm-0 ino=131083 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=dir
>denied  { read } for  pid=12345 comm="modprobe" name="openfwwf.conf" dev=dm-0 ino=132532 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=file
>denied  { read open } for  pid=12345 comm="iptables" name="modprobe" dev=dm-0 ino=418464 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:insmod_exec_t:s0 tclass=file
>denied  { search } for  pid=12345 comm="modprobe" name="modprobe.d" dev=dm-0 ino=131083 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_conf_t:s0 tclass=dir
>denied  { search } for  pid=12345 comm="modprobe" name="modules" dev=dm-0 ino=524294 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=system_u:object_r:modules_object_t:s0 tclass=dir
>denied  { setopt } for  pid=12345 comm="iptables" lport=255 scontext=unconfined_u:system_r:fail2ban_t:s0 tcontext=unconfined_u:system_r:fail2ban_t:s0 tclass=rawip_socket
>

Actions: View

Attachments on bug 916816: 704049