Attachment 814945 Details for Bug 915151 – new avc with shadow config in audit.rules for node2

new avc with shadow config in audit.rules for node2

node2_avc.txt (text/plain), 9.92 KB, created by Fabio Massimo Di Nitto on 2013-10-22 11:35:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Fabio Massimo Di Nitto

Created: 2013-10-22 11:35:24 UTC

Size: 9.92 KB

patch

obsolete

>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.406:50): item=0 name="/dev/bsg/2:0:0:0" inode=11018 dev=00:05 mode=040600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:device_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441385.406:50):  cwd="/"
>type=SYSCALL msg=audit(1382441385.406:50): arch=c000003e syscall=6 success=no exit=-13 a0=7fff5ebe8720 a1=7fff5ebe8680 a2=7fff5ebe8680 a3=0 items=1 ppid=1 pid=1642 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.406:50): avc:  denied  { dac_read_search } for  pid=1642 comm="qdiskd" capability=2  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>type=AVC msg=audit(1382441385.406:50): avc:  denied  { dac_override } for  pid=1642 comm="qdiskd" capability=1  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.406:51): item=0 name="/dev/bsg/2:0:0:1" inode=11018 dev=00:05 mode=040600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:device_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441385.406:51):  cwd="/"
>type=SYSCALL msg=audit(1382441385.406:51): arch=c000003e syscall=6 success=no exit=-13 a0=7fff5ebe8720 a1=7fff5ebe8680 a2=7fff5ebe8680 a3=0 items=1 ppid=1 pid=1642 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.406:51): avc:  denied  { dac_read_search } for  pid=1642 comm="qdiskd" capability=2  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>type=AVC msg=audit(1382441385.406:51): avc:  denied  { dac_override } for  pid=1642 comm="qdiskd" capability=1  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.407:52): item=1 name=(null) inode=11018 dev=00:05 mode=040600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:device_t:s0 nametype=NORMAL
>type=PATH msg=audit(1382441385.407:52): item=0 name="/dev/char/251:0" nametype=UNKNOWN
>type=CWD msg=audit(1382441385.407:52):  cwd="/"
>type=SYSCALL msg=audit(1382441385.407:52): arch=c000003e syscall=4 success=no exit=-13 a0=7fff5ebe8720 a1=7fff5ebe8680 a2=7fff5ebe8680 a3=0 items=2 ppid=1 pid=1642 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.407:52): avc:  denied  { dac_read_search } for  pid=1642 comm="qdiskd" capability=2  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>type=AVC msg=audit(1382441385.407:52): avc:  denied  { dac_override } for  pid=1642 comm="qdiskd" capability=1  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.407:53): item=1 name=(null) inode=11018 dev=00:05 mode=040600 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:device_t:s0 nametype=NORMAL
>type=PATH msg=audit(1382441385.407:53): item=0 name="/dev/char/251:1" nametype=UNKNOWN
>type=CWD msg=audit(1382441385.407:53):  cwd="/"
>type=SYSCALL msg=audit(1382441385.407:53): arch=c000003e syscall=4 success=no exit=-13 a0=7fff5ebe8720 a1=7fff5ebe8680 a2=7fff5ebe8680 a3=0 items=2 ppid=1 pid=1642 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.407:53): avc:  denied  { dac_read_search } for  pid=1642 comm="qdiskd" capability=2  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>type=AVC msg=audit(1382441385.407:53): avc:  denied  { dac_override } for  pid=1642 comm="qdiskd" capability=1  scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=unconfined_u:system_r:qdiskd_t:s0 tclass=capability
>----
>time->Tue Oct 22 13:29:45 2013
>type=PATH msg=audit(1382441385.409:54): item=0 name="/dev/md/autorebuild.pid" inode=11432 dev=00:05 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:mdadm_map_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441385.409:54):  cwd="/"
>type=SYSCALL msg=audit(1382441385.409:54): arch=c000003e syscall=6 success=no exit=-13 a0=7fff5ebe8720 a1=7fff5ebe8680 a2=7fff5ebe8680 a3=0 items=1 ppid=1 pid=1642 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382441385.409:54): avc:  denied  { getattr } for  pid=1642 comm="qdiskd" path="/dev/md/autorebuild.pid" dev=devtmpfs ino=11432 scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=system_u:object_r:mdadm_map_t:s0 tclass=file
>----
>time->Tue Oct 22 13:30:40 2013
>type=PATH msg=audit(1382441440.663:56): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441440.663:56):  cwd="/"
>type=SYSCALL msg=audit(1382441440.663:56): arch=c000003e syscall=2 success=no exit=-13 a0=7fb2dfdd47a0 a1=0 a2=0 a3=78 items=1 ppid=4111 pid=4346 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441440.663:56): avc:  denied  { search } for  pid=4346 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 13:30:40 2013
>type=PATH msg=audit(1382441440.662:55): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441440.662:55):  cwd="/"
>type=SYSCALL msg=audit(1382441440.662:55): arch=c000003e syscall=4 success=no exit=-13 a0=7fb2dfdd47a0 a1=7fff1717bcd0 a2=7fff1717bcd0 a3=7fff1717ba50 items=1 ppid=4111 pid=4346 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441440.662:55): avc:  denied  { search } for  pid=4346 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 13:31:31 2013
>type=PATH msg=audit(1382441491.699:58): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441491.699:58):  cwd="/"
>type=SYSCALL msg=audit(1382441491.699:58): arch=c000003e syscall=2 success=no exit=-13 a0=7f46765397a0 a1=0 a2=0 a3=78 items=1 ppid=4966 pid=5240 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441491.699:58): avc:  denied  { search } for  pid=5240 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 13:31:31 2013
>type=PATH msg=audit(1382441491.699:57): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441491.699:57):  cwd="/"
>type=SYSCALL msg=audit(1382441491.699:57): arch=c000003e syscall=4 success=no exit=-13 a0=7f46765397a0 a1=7fff1658b5d0 a2=7fff1658b5d0 a3=7fff1658b350 items=1 ppid=4966 pid=5240 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441491.699:57): avc:  denied  { search } for  pid=5240 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 13:32:14 2013
>type=PATH msg=audit(1382441534.674:60): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441534.674:60):  cwd="/"
>type=SYSCALL msg=audit(1382441534.674:60): arch=c000003e syscall=2 success=no exit=-13 a0=7f88c395e7a0 a1=0 a2=0 a3=78 items=1 ppid=5966 pid=6240 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441534.674:60): avc:  denied  { search } for  pid=6240 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 13:32:14 2013
>type=PATH msg=audit(1382441534.673:59): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382441534.673:59):  cwd="/"
>type=SYSCALL msg=audit(1382441534.673:59): arch=c000003e syscall=4 success=no exit=-13 a0=7f88c395e7a0 a1=7fff7c5b6ec0 a2=7fff7c5b6ec0 a3=7fff7c5b6c40 items=1 ppid=5966 pid=6240 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382441534.673:59): avc:  denied  { search } for  pid=6240 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir

Actions: View

Attachments on bug 915151: 702799 | 794188 | 814938 | 814939 | 814944 | 814945 | 814968 | 814969 | 815020 | 815038 | 815168