Attachment 815020 Details for Bug 915151 – pcmk avc

pcmk avc

pcmk_avc.txt (text/plain), 13.89 KB, created by Fabio Massimo Di Nitto on 2013-10-22 14:25:27 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Fabio Massimo Di Nitto

Created: 2013-10-22 14:25:27 UTC

Size: 13.89 KB

patch

obsolete

>----
>time->Tue Oct 22 16:20:11 2013
>type=PATH msg=audit(1382451611.924:180): item=0 name="/var/lib/pacemaker/cores" inode=264847 dev=fd:00 mode=040750 ouid=497 ogid=494 rdev=00:00 obj=system_u:object_r:cluster_var_lib_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451611.924:180):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451611.924:180): arch=c000003e syscall=4 success=yes exit=0 a0=192f240 a1=7fff2cd07550 a2=7fff2cd07550 a3=7fff2cd07230 items=1 ppid=1545 pid=1634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld_safe" exe="/bin/bash" subj=unconfined_u:system_r:mysqld_safe_t:s0 key=(null)
>type=AVC msg=audit(1382451611.924:180): avc:  denied  { search } for  pid=1634 comm="mysqld_safe" name="pacemaker" dev=dm-0 ino=264576 scontext=unconfined_u:system_r:mysqld_safe_t:s0 tcontext=system_u:object_r:cluster_var_lib_t:s0 tclass=dir
>----
>time->Tue Oct 22 16:20:11 2013
>type=PATH msg=audit(1382451611.950:181): item=0 name="." inode=264847 dev=fd:00 mode=040750 ouid=497 ogid=494 rdev=00:00 obj=system_u:object_r:cluster_var_lib_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451611.950:181):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451611.950:181): arch=c000003e syscall=4 success=yes exit=0 a0=4a3bcb a1=7fff2cd06d40 a2=7fff2cd06d40 a3=7f9242391670 items=1 ppid=1642 pid=1644 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld_safe" exe="/bin/bash" subj=unconfined_u:system_r:mysqld_safe_t:s0 key=(null)
>type=AVC msg=audit(1382451611.950:181): avc:  denied  { search } for  pid=1644 comm="mysqld_safe" name="cores" dev=dm-0 ino=264847 scontext=unconfined_u:system_r:mysqld_safe_t:s0 tcontext=system_u:object_r:cluster_var_lib_t:s0 tclass=dir
>----
>time->Tue Oct 22 16:20:11 2013
>type=PATH msg=audit(1382451611.983:182): item=0 name="/var/lib/mysql/my.cnf" inode=12 dev=fd:03 mode=0100644 ouid=27 ogid=27 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451611.983:182):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451611.983:182): arch=c000003e syscall=4 success=yes exit=0 a0=1941ba0 a1=7fff2cd070d0 a2=7fff2cd070d0 a3=8 items=1 ppid=1545 pid=1634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld_safe" exe="/bin/bash" subj=unconfined_u:system_r:mysqld_safe_t:s0 key=(null)
>type=AVC msg=audit(1382451611.983:182): avc:  denied  { getattr } for  pid=1634 comm="mysqld_safe" path="/var/lib/mysql/my.cnf" dev=dm-3 ino=12 scontext=unconfined_u:system_r:mysqld_safe_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Oct 22 16:20:11 2013
>type=PATH msg=audit(1382451611.984:183): item=0 name="/var/lib/mysql/my.cnf" inode=12 dev=fd:03 mode=0100644 ouid=27 ogid=27 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451611.984:183):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451611.984:183): arch=c000003e syscall=21 success=yes exit=0 a0=1941ba0 a1=4 a2=0 a3=8 items=1 ppid=1545 pid=1634 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld_safe" exe="/bin/bash" subj=unconfined_u:system_r:mysqld_safe_t:s0 key=(null)
>type=AVC msg=audit(1382451611.984:183): avc:  denied  { read } for  pid=1634 comm="mysqld_safe" name="my.cnf" dev=dm-3 ino=12 scontext=unconfined_u:system_r:mysqld_safe_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Oct 22 16:20:11 2013
>type=PATH msg=audit(1382451611.996:184): item=0 name="/var/lib/mysql/my.cnf" inode=12 dev=fd:03 mode=0100644 ouid=27 ogid=27 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451611.996:184):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451611.996:184): arch=c000003e syscall=2 success=yes exit=3 a0=7fff2bd312f0 a1=0 a2=1b6 a3=0 items=1 ppid=1634 pid=1661 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="my_print_defaul" exe="/usr/bin/my_print_defaults" subj=unconfined_u:system_r:mysqld_safe_t:s0 key=(null)
>type=AVC msg=audit(1382451611.996:184): avc:  denied  { open } for  pid=1661 comm="my_print_defaul" name="my.cnf" dev=dm-3 ino=12 scontext=unconfined_u:system_r:mysqld_safe_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Oct 22 16:20:12 2013
>type=PATH msg=audit(1382451612.280:185): item=0 name="/var/lib/mysql/my.cnf" inode=12 dev=fd:03 mode=0100644 ouid=27 ogid=27 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451612.280:185):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451612.280:185): arch=c000003e syscall=4 success=yes exit=0 a0=7fff2e591750 a1=7fff2e58e6b0 a2=7fff2e58e6b0 a3=7fff2e58e380 items=1 ppid=1634 pid=1737 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.280:185): avc:  denied  { getattr } for  pid=1737 comm="mysqld" path="/var/lib/mysql/my.cnf" dev=dm-3 ino=12 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>type=AVC msg=audit(1382451612.280:185): avc:  denied  { search } for  pid=1737 comm="mysqld" name="/" dev=dm-3 ino=2 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Oct 22 16:20:12 2013
>type=PATH msg=audit(1382451612.281:186): item=0 name="/var/lib/mysql/my.cnf" inode=12 dev=fd:03 mode=0100644 ouid=27 ogid=27 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451612.281:186):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451612.281:186): arch=c000003e syscall=2 success=yes exit=3 a0=7fff2e591750 a1=0 a2=1b6 a3=0 items=1 ppid=1634 pid=1737 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.281:186): avc:  denied  { open } for  pid=1737 comm="mysqld" name="my.cnf" dev=dm-3 ino=12 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>type=AVC msg=audit(1382451612.281:186): avc:  denied  { read } for  pid=1737 comm="mysqld" name="my.cnf" dev=dm-3 ino=12 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Oct 22 16:20:12 2013
>type=PATH msg=audit(1382451612.281:187): item=0 name="/var/lib/mysql" inode=2 dev=fd:03 mode=040755 ouid=27 ogid=27 rdev=00:00 obj=system_u:object_r:file_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451612.281:187):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451612.281:187): arch=c000003e syscall=6 success=yes exit=0 a0=7fff2e590ac0 a1=7fff2e5909f0 a2=7fff2e5909f0 a3=7fff2e590840 items=1 ppid=1634 pid=1737 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.281:187): avc:  denied  { getattr } for  pid=1737 comm="mysqld" path="/var/lib/mysql" dev=dm-3 ino=2 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Oct 22 16:20:12 2013
>type=PATH msg=audit(1382451612.286:188): item=1 name="/var/lib/mysql/rhel6-node2.lower-test" inode=85 dev=fd:03 mode=0100660 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=CREATE
>type=PATH msg=audit(1382451612.286:188): item=0 name="/var/lib/mysql/" inode=2 dev=fd:03 mode=040755 ouid=27 ogid=27 rdev=00:00 obj=system_u:object_r:file_t:s0 nametype=PARENT
>type=CWD msg=audit(1382451612.286:188):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451612.286:188): arch=c000003e syscall=2 success=yes exit=3 a0=7fff2e591b00 a1=42 a2=1b6 a3=7fff2e5915c0 items=2 ppid=1634 pid=1737 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.286:188): avc:  denied  { write } for  pid=1737 comm="mysqld" name="rhel6-node2.lower-test" dev=dm-3 ino=85 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>type=AVC msg=audit(1382451612.286:188): avc:  denied  { create } for  pid=1737 comm="mysqld" name="rhel6-node2.lower-test" scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>type=AVC msg=audit(1382451612.286:188): avc:  denied  { add_name } for  pid=1737 comm="mysqld" name="rhel6-node2.lower-test" scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>type=AVC msg=audit(1382451612.286:188): avc:  denied  { write } for  pid=1737 comm="mysqld" name="/" dev=dm-3 ino=2 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Oct 22 16:20:12 2013
>type=PATH msg=audit(1382451612.286:189): item=1 name="/var/lib/mysql/rhel6-node2.lower-test" inode=85 dev=fd:03 mode=0100660 ouid=0 ogid=0 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=DELETE
>type=PATH msg=audit(1382451612.286:189): item=0 name="/var/lib/mysql/" inode=2 dev=fd:03 mode=040755 ouid=27 ogid=27 rdev=00:00 obj=system_u:object_r:file_t:s0 nametype=PARENT
>type=CWD msg=audit(1382451612.286:189):  cwd="/var/lib/pacemaker/cores"
>type=SYSCALL msg=audit(1382451612.286:189): arch=c000003e syscall=87 success=yes exit=0 a0=7fff2e591b00 a1=10 a2=7f8c61e4eaf0 a3=7265776f6c2e3265 items=2 ppid=1634 pid=1737 auid=0 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.286:189): avc:  denied  { unlink } for  pid=1737 comm="mysqld" name="rhel6-node2.lower-test" dev=dm-3 ino=85 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>type=AVC msg=audit(1382451612.286:189): avc:  denied  { remove_name } for  pid=1737 comm="mysqld" name="rhel6-node2.lower-test" dev=dm-3 ino=85 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Oct 22 16:20:12 2013
>type=PATH msg=audit(1382451612.292:190): item=0 name="./mysql/plugin.frm" inode=25 dev=fd:03 mode=0100660 ouid=27 ogid=27 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451612.292:190):  cwd="/var/lib/mysql"
>type=SYSCALL msg=audit(1382451612.292:190): arch=c000003e syscall=2 success=yes exit=3 a0=7fff2e5904b0 a1=0 a2=1b0 a3=1 items=1 ppid=1634 pid=1737 auid=0 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.292:190): avc:  denied  { search } for  pid=1737 comm="mysqld" name="mysql" dev=dm-3 ino=8193 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Oct 22 16:20:12 2013
>type=PATH msg=audit(1382451612.292:191): item=0 name="/var/lib/mysql/mysql" inode=8193 dev=fd:03 mode=040700 ouid=27 ogid=27 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=NORMAL
>type=CWD msg=audit(1382451612.292:191):  cwd="/var/lib/mysql"
>type=SYSCALL msg=audit(1382451612.292:191): arch=c000003e syscall=6 success=yes exit=0 a0=7fff2e585ce0 a1=7fff2e585c10 a2=7fff2e585c10 a3=fffffffffffffffd items=1 ppid=1634 pid=1737 auid=0 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.292:191): avc:  denied  { getattr } for  pid=1737 comm="mysqld" path="/var/lib/mysql/mysql" dev=dm-3 ino=8193 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=dir
>----
>time->Tue Oct 22 16:20:12 2013
>type=SYSCALL msg=audit(1382451612.321:192): arch=c000003e syscall=72 success=yes exit=0 a0=3 a1=6 a2=7fff2e58e8c0 a3=7fff2e58e640 items=0 ppid=1634 pid=1737 auid=0 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.321:192): avc:  denied  { lock } for  pid=1737 comm="mysqld" path="/var/lib/mysql/ibdata1" dev=dm-3 ino=82 scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=file
>----
>time->Tue Oct 22 16:20:12 2013
>type=PATH msg=audit(1382451612.939:193): item=4 name=(null) inode=85 dev=fd:03 mode=0140777 ouid=27 ogid=27 rdev=00:00 obj=unconfined_u:object_r:file_t:s0 nametype=CREATE
>type=PATH msg=audit(1382451612.939:193): item=3 name=(null) inode=2 dev=fd:03 mode=040755 ouid=27 ogid=27 rdev=00:00 obj=system_u:object_r:file_t:s0 nametype=PARENT
>type=PATH msg=audit(1382451612.939:193): item=2 name=(null) nametype=CREATE
>type=PATH msg=audit(1382451612.939:193): item=1 name=(null) inode=2 dev=fd:03 mode=040755 ouid=27 ogid=27 rdev=00:00 obj=system_u:object_r:file_t:s0 nametype=PARENT
>type=PATH msg=audit(1382451612.939:193): item=0 name=(null) inode=2 dev=fd:03 mode=040755 ouid=27 ogid=27 rdev=00:00 obj=system_u:object_r:file_t:s0 nametype=PARENT
>type=SOCKADDR msg=audit(1382451612.939:193): saddr=01002F7661722F6C69622F6D7973716C2F6D7973716C2E736F636B0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000
>type=SYSCALL msg=audit(1382451612.939:193): arch=c000003e syscall=49 success=yes exit=0 a0=c a1=7fff2e592000 a2=6e a3=7fff2e591ffc items=5 ppid=1634 pid=1737 auid=0 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) ses=1 comm="mysqld" exe="/usr/libexec/mysqld" subj=unconfined_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1382451612.939:193): avc:  denied  { create } for  pid=1737 comm="mysqld" name="mysql.sock" scontext=unconfined_u:system_r:mysqld_t:s0 tcontext=unconfined_u:object_r:file_t:s0 tclass=sock_file

Actions: View

Attachments on bug 915151: 702799 | 794188 | 814938 | 814939 | 814944 | 814945 | 814968 | 814969 | 815020 | 815038 | 815168