Attachment 827173 Details for Bug 1033027 – Relevant audit log parts

Relevant audit log parts

audit.log (text/plain), 3.44 KB, created by Tomas Smetana on 2013-11-21 12:52:35 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Tomas Smetana

Created: 2013-11-21 12:52:35 UTC

Size: 3.44 KB

patch

obsolete

>type=AVC msg=audit(1385034882.266:134): avc:  denied  { getattr } for  pid=647 comm="sh" path="/usr/sbin/dmidecode" dev="vda2" ino=263006 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:dmidecode_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1385034882.266:134): arch=c000003e syscall=4 success=yes exit=0 a0=18b4850 a1=7fff0eb4e890 a2=7fff0eb4e890 a3=0 items=0 ppid=641 pid=647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1385034882.267:135): avc:  denied  { execute } for  pid=647 comm="sh" name="dmidecode" dev="vda2" ino=263006 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:dmidecode_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1385034882.267:135): arch=c000003e syscall=21 success=yes exit=0 a0=18b4850 a1=1 a2=7fff0eb4e7c0 a3=0 items=0 ppid=641 pid=647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1385034882.267:136): avc:  denied  { read } for  pid=647 comm="sh" name="dmidecode" dev="vda2" ino=263006 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:dmidecode_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1385034882.267:136): arch=c000003e syscall=21 success=yes exit=0 a0=18b4850 a1=4 a2=7fff0eb4e7c0 a3=0 items=0 ppid=641 pid=647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1385034882.267:137): avc:  denied  { open } for  pid=647 comm="sh" path="/usr/sbin/dmidecode" dev="vda2" ino=263006 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:dmidecode_exec_t:s0 tclass=file
>type=AVC msg=audit(1385034882.267:137): avc:  denied  { execute_no_trans } for  pid=647 comm="sh" path="/usr/sbin/dmidecode" dev="vda2" ino=263006 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:dmidecode_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1385034882.267:137): arch=c000003e syscall=59 success=yes exit=0 a0=18b4850 a1=18b3e60 a2=18b3b00 a3=7fff0eb4e770 items=0 ppid=641 pid=647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="dmidecode" exe="/usr/sbin/dmidecode" subj=system_u:system_r:pegasus_t:s0 key=(null)
>type=AVC msg=audit(1385034882.333:138): avc:  denied  { read } for  pid=647 comm="dmidecode" name="mem" dev="devtmpfs" ino=5136 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1385034882.333:138): avc:  denied  { open } for  pid=647 comm="dmidecode" path="/dev/mem" dev="devtmpfs" ino=5136 scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:object_r:memory_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1385034882.333:138): avc:  denied  { sys_rawio } for  pid=647 comm="dmidecode" capability=17  scontext=system_u:system_r:pegasus_t:s0 tcontext=system_u:system_r:pegasus_t:s0 tclass=capability
>type=SYSCALL msg=audit(1385034882.333:138): arch=c000003e syscall=2 success=yes exit=6 a0=409d5a a1=0 a2=409d5a a3=7fffb9d158c0 items=0 ppid=641 pid=647 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="dmidecode" exe="/usr/sbin/dmidecode" subj=system_u:system_r:pegasus_t:s0 key=(null)

Actions: View

Attachments on bug 1033027: 827173