Attachment 706778 Details for Bug 919193 – AVCs logs

AVCs logs

file_919193.txt (text/plain), 4.55 KB, created by Ofer Blaut on 2013-03-07 19:51:20 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ofer Blaut

Created: 2013-03-07 19:51:20 UTC

Size: 4.55 KB

patch

obsolete

>Tested  with  latest openstack-quantum-2012.2.3-5.el6ost.noarch
>
>and latest selinux
>
>selinux-policy-targeted-3.7.19-195.el6_4.noarch
>selinux-policy-3.7.19-195.el6_4.noarch
>
>
>Mar  7 16:02:27 puma34 kernel: type=1400 audit(1362664947.559:65): avc:  denied  { read } for  pid=5444 comm="dnsmasq" name="host" dev=dm-0 ino=29229504 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=file
>Mar  7 16:02:27 puma34 kernel: type=1400 audit(1362664947.559:66): avc:  denied  { open } for  pid=5444 comm="dnsmasq" name="host" dev=dm-0 ino=29229504 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=file
>Mar  7 16:02:27 puma34 kernel: type=1400 audit(1362664947.559:67): avc:  denied  { getattr } for  pid=5444 comm="dnsmasq" path="/var/lib/quantum/dhcp/58cd3a69-9133-431c-977b-4a59cc004b75/host" dev=dm-0 ino=29229504 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=file
>Mar  7 16:02:27 puma34 kernel: qbr1942971b-11: port 2(tap1942971b-11) entering disabled state
>Mar  7 16:02:27 puma34 kernel: device tap1942971b-11 left promiscuous mode
>Mar  7 16:02:27 puma34 kernel: qbr1942971b-11: port 2(tap1942971b-11) entering disabled state
>Mar  7 16:02:27 puma34 dnsmasq[5444]: cleared cache
>Mar  7 16:02:27 puma34 dnsmasq[5444]: read /var/lib/quantum/dhcp/58cd3a69-9133-431c-977b-4a59cc004b75/host
>Mar  7 16:02:27 puma34 dnsmasq[5444]: read /var/lib/quantum/dhcp/58cd3a69-9133-431c-977b-4a59cc004b75/opts
>Mar  7 16:02:27 puma34 kernel: type=1400 audit(1362664947.906:68): avc:  denied  { search } for  pid=5444 comm="dnsmasq" name="dhcp" dev=dm-0 ino=29229435 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=unconfined_u:object_r:quantum_var_lib_t:s0 tclass=dir
>Mar  7 16:02:28 puma34 kernel: type=1400 audit(1362664948.304:69): avc:  denied  { getattr } for  pid=28369 comm="python" path="/var/lib/quantum/dhcp/lease_relay" dev=dm-0 ino=29229452 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=sock_file
>Mar  7 16:02:28 puma34 kernel: type=1400 audit(1362664948.305:70): avc:  denied  { write } for  pid=28369 comm="python" name="lease_relay" dev=dm-0 ino=29229452 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=sock_file
>
>
>
>
>Mar  7 16:02:27 puma34 kernel: type=1400 audit(1362664947.559:66): avc:  denied  { open } for  pid=5444 comm="dnsmasq" name="host" dev=dm-0 ino=29229504 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=file
>
>        Was caused by:
>                Missing type enforcement (TE) allow rule.
>
>                You can use audit2allow to generate a loadable module to allow this access.
>
>Mar  7 16:02:27 puma34 kernel: type=1400 audit(1362664947.559:67): avc:  denied  { getattr } for  pid=5444 comm="dnsmasq" path="/var/lib/quantum/dhcp/58cd3a69-9133-431c-977b-4a59cc004b75/host" dev=dm-0 ino=29229504 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=file
>
>        Was caused by:
>                Missing type enforcement (TE) allow rule.
>
>                You can use audit2allow to generate a loadable module to allow this access.
>
>Mar  7 16:02:27 puma34 kernel: type=1400 audit(1362664947.906:68): avc:  denied  { search } for  pid=5444 comm="dnsmasq" name="dhcp" dev=dm-0 ino=29229435 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=unconfined_u:object_r:quantum_var_lib_t:s0 tclass=dir
>
>        Was caused by:
>                Missing type enforcement (TE) allow rule.
>
>                You can use audit2allow to generate a loadable module to allow this access.
>
>Mar  7 16:02:28 puma34 kernel: type=1400 audit(1362664948.304:69): avc:  denied  { getattr } for  pid=28369 comm="python" path="/var/lib/quantum/dhcp/lease_relay" dev=dm-0 ino=29229452 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=sock_file
>
>        Was caused by:
>                Missing type enforcement (TE) allow rule.
>
>                You can use audit2allow to generate a loadable module to allow this access.
>
>Mar  7 16:02:28 puma34 kernel: type=1400 audit(1362664948.305:70): avc:  denied  { write } for  pid=28369 comm="python" name="lease_relay" dev=dm-0 ino=29229452 scontext=system_u:system_r:dnsmasq_t:s0 tcontext=system_u:object_r:quantum_var_lib_t:s0 tclass=sock_file
>
>        Was caused by:
>                Missing type enforcement (TE) allow rule.
>
>                You can use audit2allow to generate a loadable module to allow this access

Actions: View

Attachments on bug 919193: 706778