Attachment 814968 Details for Bug 915151 – new avc with shadow config in audit.rules for node1 with first 227 build

new avc with shadow config in audit.rules for node1 with first 227 build

node1_avc.txt (text/plain), 9.65 KB, created by Fabio Massimo Di Nitto on 2013-10-22 12:33:17 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Fabio Massimo Di Nitto

Created: 2013-10-22 12:33:17 UTC

Size: 9.65 KB

patch

obsolete

>----
>time->Tue Oct 22 14:23:46 2013
>type=PATH msg=audit(1382444626.611:50): item=0 name="/dev/md/autorebuild.pid" inode=11437 dev=00:05 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:mdadm_map_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382444626.611:50):  cwd="/"
>type=SYSCALL msg=audit(1382444626.611:50): arch=c000003e syscall=6 success=no exit=-13 a0=7fffca5d5750 a1=7fffca5d56b0 a2=7fffca5d56b0 a3=0 items=1 ppid=1 pid=1643 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382444626.611:50): avc:  denied  { getattr } for  pid=1643 comm="qdiskd" path="/dev/md/autorebuild.pid" dev=devtmpfs ino=11437 scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=system_u:object_r:mdadm_map_t:s0 tclass=file
>----
>time->Tue Oct 22 14:25:06 2013
>type=PATH msg=audit(1382444706.877:52): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382444706.877:52):  cwd="/"
>type=SYSCALL msg=audit(1382444706.877:52): arch=c000003e syscall=2 success=no exit=-13 a0=7f93a72d07a0 a1=0 a2=0 a3=78 items=1 ppid=4093 pid=4328 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382444706.877:52): avc:  denied  { search } for  pid=4328 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 14:25:06 2013
>type=PATH msg=audit(1382444706.876:51): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382444706.876:51):  cwd="/"
>type=SYSCALL msg=audit(1382444706.876:51): arch=c000003e syscall=4 success=no exit=-13 a0=7f93a72d07a0 a1=7fff824848e0 a2=7fff824848e0 a3=7fff82484660 items=1 ppid=4093 pid=4328 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382444706.876:51): avc:  denied  { search } for  pid=4328 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 14:25:58 2013
>type=PATH msg=audit(1382444758.046:54): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382444758.046:54):  cwd="/"
>type=SYSCALL msg=audit(1382444758.046:54): arch=c000003e syscall=2 success=no exit=-13 a0=7fe4b45d07a0 a1=0 a2=0 a3=78 items=1 ppid=4909 pid=5183 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382444758.046:54): avc:  denied  { search } for  pid=5183 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 14:25:58 2013
>type=PATH msg=audit(1382444758.045:53): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=261074 dev=fd:00 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382444758.045:53):  cwd="/"
>type=SYSCALL msg=audit(1382444758.045:53): arch=c000003e syscall=4 success=no exit=-13 a0=7fe4b45d07a0 a1=7fff893e6ef0 a2=7fff893e6ef0 a3=7fff893e6c70 items=1 ppid=4909 pid=5183 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382444758.045:53): avc:  denied  { search } for  pid=5183 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>****** PERMISSIVE *****
>----
>time->Tue Oct 22 14:30:34 2013
>type=PATH msg=audit(1382445034.947:49): item=0 name="/dev/md/autorebuild.pid" inode=11446 dev=00:05 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:mdadm_map_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382445034.947:49):  cwd="/"
>type=SYSCALL msg=audit(1382445034.947:49): arch=c000003e syscall=6 success=yes exit=0 a0=7fffdffcea80 a1=7fffdffce9e0 a2=7fffdffce9e0 a3=0 items=1 ppid=1 pid=1704 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="qdiskd" exe="/usr/sbin/qdiskd" subj=unconfined_u:system_r:qdiskd_t:s0 key=(null)
>type=AVC msg=audit(1382445034.947:49): avc:  denied  { getattr } for  pid=1704 comm="qdiskd" path="/dev/md/autorebuild.pid" dev=devtmpfs ino=11446 scontext=unconfined_u:system_r:qdiskd_t:s0 tcontext=system_u:object_r:mdadm_map_t:s0 tclass=file
>----
>time->Tue Oct 22 14:31:17 2013
>type=PATH msg=audit(1382445077.075:51): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=397706 dev=fd:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382445077.075:51):  cwd="/"
>type=SYSCALL msg=audit(1382445077.075:51): arch=c000003e syscall=2 success=yes exit=3 a0=7f500c3517a0 a1=0 a2=0 a3=78 items=1 ppid=4155 pid=4429 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382445077.075:51): avc:  denied  { open } for  pid=4429 comm="smbd" name="smb.conf" dev=dm-0 ino=397706 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:cluster_conf_t:s0 tclass=file
>type=AVC msg=audit(1382445077.075:51): avc:  denied  { read } for  pid=4429 comm="smbd" name="smb.conf" dev=dm-0 ino=397706 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:cluster_conf_t:s0 tclass=file
>----
>time->Tue Oct 22 14:31:17 2013
>type=PATH msg=audit(1382445077.074:50): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=397706 dev=fd:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382445077.074:50):  cwd="/"
>type=SYSCALL msg=audit(1382445077.074:50): arch=c000003e syscall=4 success=yes exit=0 a0=7f500c3517a0 a1=7fff15d1b740 a2=7fff15d1b740 a3=7fff15d1b4c0 items=1 ppid=4155 pid=4429 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="smbd" exe="/usr/sbin/smbd" subj=unconfined_u:system_r:smbd_t:s0 key=(null)
>type=AVC msg=audit(1382445077.074:50): avc:  denied  { getattr } for  pid=4429 comm="smbd" path="/etc/cluster/samba/samba:samba/smb.conf" dev=dm-0 ino=397706 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:cluster_conf_t:s0 tclass=file
>type=AVC msg=audit(1382445077.074:50): avc:  denied  { search } for  pid=4429 comm="smbd" name="samba" dev=dm-0 ino=397703 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=unconfined_u:object_r:cluster_conf_t:s0 tclass=dir
>type=AVC msg=audit(1382445077.074:50): avc:  denied  { search } for  pid=4429 comm="smbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:smbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 14:31:17 2013
>type=PATH msg=audit(1382445077.166:52): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=397706 dev=fd:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382445077.166:52):  cwd="/"
>type=SYSCALL msg=audit(1382445077.166:52): arch=c000003e syscall=4 success=yes exit=0 a0=7fae89f5b850 a1=7fffc99f2650 a2=7fffc99f2650 a3=7fffc99f23d0 items=1 ppid=4155 pid=4431 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="nmbd" exe="/usr/sbin/nmbd" subj=unconfined_u:system_r:nmbd_t:s0 key=(null)
>type=AVC msg=audit(1382445077.166:52): avc:  denied  { getattr } for  pid=4431 comm="nmbd" path="/etc/cluster/samba/samba:samba/smb.conf" dev=dm-0 ino=397706 scontext=unconfined_u:system_r:nmbd_t:s0 tcontext=unconfined_u:object_r:cluster_conf_t:s0 tclass=file
>type=AVC msg=audit(1382445077.166:52): avc:  denied  { search } for  pid=4431 comm="nmbd" name="samba" dev=dm-0 ino=397703 scontext=unconfined_u:system_r:nmbd_t:s0 tcontext=unconfined_u:object_r:cluster_conf_t:s0 tclass=dir
>type=AVC msg=audit(1382445077.166:52): avc:  denied  { search } for  pid=4431 comm="nmbd" name="cluster" dev=dm-0 ino=261074 scontext=unconfined_u:system_r:nmbd_t:s0 tcontext=system_u:object_r:cluster_conf_t:s0 tclass=dir
>----
>time->Tue Oct 22 14:31:17 2013
>type=PATH msg=audit(1382445077.167:53): item=0 name="/etc/cluster/samba/samba:samba/smb.conf" inode=397706 dev=fd:00 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:cluster_conf_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382445077.167:53):  cwd="/"
>type=SYSCALL msg=audit(1382445077.167:53): arch=c000003e syscall=2 success=yes exit=3 a0=7fae89f5b850 a1=0 a2=0 a3=78 items=1 ppid=4155 pid=4431 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=2 comm="nmbd" exe="/usr/sbin/nmbd" subj=unconfined_u:system_r:nmbd_t:s0 key=(null)
>type=AVC msg=audit(1382445077.167:53): avc:  denied  { open } for  pid=4431 comm="nmbd" name="smb.conf" dev=dm-0 ino=397706 scontext=unconfined_u:system_r:nmbd_t:s0 tcontext=unconfined_u:object_r:cluster_conf_t:s0 tclass=file
>type=AVC msg=audit(1382445077.167:53): avc:  denied  { read } for  pid=4431 comm="nmbd" name="smb.conf" dev=dm-0 ino=397706 scontext=unconfined_u:system_r:nmbd_t:s0 tcontext=unconfined_u:object_r:cluster_conf_t:s0 tclass=file

Actions: View

Attachments on bug 915151: 702799 | 794188 | 814938 | 814939 | 814944 | 814945 | 814968 | 814969 | 815020 | 815038 | 815168