Attachment 814944 Details for Bug 915151 – new avc with shadow config in audit.rules for node1

new avc with shadow config in audit.rules for node1

node1_avc.txt (text/plain), 8.28 KB, created by Fabio Massimo Di Nitto on 2013-10-22 11:34:54 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Fabio Massimo Di Nitto

Created: 2013-10-22 11:34:54 UTC

Size: 8.28 KB

patch

obsolete

>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.408:50): item=0 name="/dev/bsg/2:0:0:0" inode=11018 dev=00:05 mode=040600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:device_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441385.408:50):  cwd="/"
>type=SYSCALL msg=audit(1382441385.408:50): arch=c000003e syscall=6 success=no exit=-13 a0=7fff70fe7050 a1=7fff70fe6fb0 a2=7fff70fe6fb0 a3=0 items=1 ppid=1 pid=1639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.408:50): avc:  denied  { dac_read_search } for  pid=1639 comm="qdiskd" capability=2  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>type=AVC msg=audit(1382441385.408:50): avc:  denied  { dac_override } for  pid=1639 comm="qdiskd" capability=1  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.408:51): item=0 name="/dev/bsg/2:0:0:1" inode=11018 dev=00:05 mode=040600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:device_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441385.408:51):  cwd="/"
>type=SYSCALL msg=audit(1382441385.408:51): arch=c000003e syscall=6 success=no exit=-13 a0=7fff70fe7050 a1=7fff70fe6fb0 a2=7fff70fe6fb0 a3=0 items=1 ppid=1 pid=1639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.408:51): avc:  denied  { dac_read_search } for  pid=1639 comm="qdiskd" capability=2  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>type=AVC msg=audit(1382441385.408:51): avc:  denied  { dac_override } for  pid=1639 comm="qdiskd" capability=1  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.409:52): item=1 name=(null) inode=11018 dev=00:05 mode=040600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:device_t:s0 nametype=NORMAL
>type=PATH msg=audit(1382441385.409:52): item=0 name="/dev/char/251:0" nametype=UNKNOWN
>type=CWD msg=audit(1382441385.409:52):  cwd="/"
>type=SYSCALL msg=audit(1382441385.409:52): arch=c000003e syscall=4 success=no exit=-13 a0=7fff70fe7050 a1=7fff70fe6fb0 a2=7fff70fe6fb0 a3=0 items=2 ppid=1 pid=1639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.409:52): avc:  denied  { dac_read_search } for  pid=1639 comm="qdiskd" capability=2  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>type=AVC msg=audit(1382441385.409:52): avc:  denied  { dac_override } for  pid=1639 comm="qdiskd" capability=1  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.409:53): item=1 name=(null) inode=11018 dev=00:05 mode=040600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:device_t:s0 nametype=NORMAL
>type=PATH msg=audit(1382441385.409:53): item=0 name="/dev/char/251:1" nametype=UNKNOWN
>type=CWD msg=audit(1382441385.409:53):  cwd="/"
>type=SYSCALL msg=audit(1382441385.409:53): arch=c000003e syscall=4 success=no exit=-13 a0=7fff70fe7050 a1=7fff70fe6fb0 a2=7fff70fe6fb0 a3=0 items=2 ppid=1 pid=1639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.409:53): avc:  denied  { dac_read_search } for  pid=1639 comm="qdiskd" capability=2  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>type=AVC msg=audit(1382441385.409:53): avc:  denied  { dac_override } for  pid=1639 comm="qdiskd" capability=1  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.411:54): item=0 name="/dev/md/autorebuild.pid" inode=11418 dev=00:05 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:mdadm_map_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441385.411:54):  cwd="/"
>type=SYSCALL msg=audit(1382441385.411:54): arch=c000003e syscall=6 success=no exit=-13 a0=7fff70fe7050 a1=7fff70fe6fb0 a2=7fff70fe6fb0 a3=0 items=1 ppid=1 pid=1639 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.411:54): avc:  denied  { getattr } for  pid=1639 comm="qdiskd" path="/dev/md/autorebuild.pid" dev=devtmpfs ino=11418 scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=system_u:object_r:mdadm_map_t:s0 tclass=file
>----
>time->Tue Oct 22 13:31:14 2013
>type=PATH msg=audit(1382441474.698:56): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441474.698:56):  cwd="/"
>type=SYSCALL msg=audit(1382441474.698:56): arch=c000003e syscall=2 success=no exit=-13 a0=7f13065317a0 a1=0 a2=0 a3=78 items=1 ppid=5658 pid=5885 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441474.698:56): avc:  denied  { search } for  pid=5885 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 13:31:14 2013
>type=PATH msg=audit(1382441474.698:55): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441474.698:55):  cwd="/"
>type=SYSCALL msg=audit(1382441474.698:55): arch=c000003e syscall=4 success=no exit=-13 a0=7f13065317a0 a1=7fff5f5eb100 a2=7fff5f5eb100 a3=7fff5f5eae80 items=1 ppid=5658 pid=5885 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441474.698:55): avc:  denied  { search } for  pid=5885 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 13:32:31 2013
>type=PATH msg=audit(1382441551.591:58): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441551.591:58):  cwd="/"
>type=SYSCALL msg=audit(1382441551.591:58): arch=c000003e syscall=2 success=no exit=-13 a0=7f5507c4a7a0 a1=0 a2=0 a3=78 items=1 ppid=8262 pid=8536 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441551.591:58): avc:  denied  { search } for  pid=8536 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 13:32:31 2013
>type=PATH msg=audit(1382441551.591:57): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441551.591:57):  cwd="/"
>type=SYSCALL msg=audit(1382441551.591:57): arch=c000003e syscall=4 success=no exit=-13 a0=7f5507c4a7a0 a1=7fff52ca86f0 a2=7fff52ca86f0 a3=7fff52ca8470 items=1 ppid=8262 pid=8536 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441551.591:57): avc:  denied  { search } for  pid=8536 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir

Actions: View

Attachments on bug 915151: 702799 | 794188 | 814938 | 814939 | 814944 | 814945 | 814968 | 814969 | 815020 | 815038 | 815168