Attachment 833305 Details for Bug 1038770 – Audit messages without the custom module

Audit messages without the custom module

audit_messages.txt (text/plain), 5.63 KB, created by Jonathan Underwood on 2013-12-05 19:29:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Jonathan Underwood

Created: 2013-12-05 19:29:30 UTC

Size: 5.63 KB

patch

obsolete

>/var/log/audit/audit.log.1:type=AVC msg=audit(1378315759.977:529176): avc:  denied  { read } for  pid=15011 comm="rsync" name="os" dev=dm-1 ino=10878979 scontext=system_u:system_r:cobblerd_t:s0 tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=dir
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378315759.977:529176): arch=c000003e syscall=2 success=no exit=-13 a0=7fffa948be80 a1=90800 a2=7fffa948be80 a3=8 items=0 ppid=3541 pid=15011 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:cobblerd_t:s0 key=(null)
>/var/log/audit/audit.log.1:type=AVC msg=audit(1378315849.536:529184): avc:  denied  { read } for  pid=15562 comm="rsync" name="os" dev=dm-1 ino=10878979 scontext=system_u:system_r:cobblerd_t:s0 tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=dir
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378315849.536:529184): arch=c000003e syscall=2 success=yes exit=3 a0=7fffaeb9f510 a1=90800 a2=7fffaeb9f510 a3=8 items=0 ppid=3541 pid=15562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:cobblerd_t:s0 key=(null)
>/var/log/audit/audit.log.1:type=AVC msg=audit(1378315851.653:529185): avc:  denied  { getattr } for  pid=15562 comm="rsync" path="/srv/www/mirrors/scientific/6.4/x86_64/os/images/xen" dev=dm-1 ino=11141123 scontext=system_u:system_r:cobblerd_t:s0 tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=lnk_file
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378315851.653:529185): arch=c000003e syscall=6 success=yes exit=0 a0=7fffaeb9a000 a1=7fffaeb98f70 a2=7fffaeb98f70 a3=0 items=0 ppid=3541 pid=15562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:cobblerd_t:s0 key=(null)
>/var/log/audit/audit.log.1:type=AVC msg=audit(1378315851.653:529186): avc:  denied  { read } for  pid=15562 comm="rsync" name="xen" dev=dm-1 ino=11141123 scontext=system_u:system_r:cobblerd_t:s0 tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=lnk_file
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378315851.653:529186): arch=c000003e syscall=89 success=yes exit=7 a0=7fffaeb9a000 a1=7fffaeb99000 a2=fff a3=0 items=0 ppid=3541 pid=15562 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:cobblerd_t:s0 key=(null)
>/var/log/audit/audit.log.1:type=AVC msg=audit(1378315854.889:529187): avc:  denied  { write } for  pid=15570 comm="cobblerd" name="tftp" dev=sda3 ino=2100006 scontext=system_u:system_r:cobblerd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378315854.889:529187): arch=c000003e syscall=2 success=yes exit=34 a0=7ff4400a3440 a1=242 a2=1b6 a3=0 items=0 ppid=1 pid=15570 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cobblerd" exe="/usr/bin/python" subj=system_u:system_r:cobblerd_t:s0 key=(null)
>/var/log/audit/audit.log.1:type=AVC msg=audit(1378316140.405:529188): avc:  denied  { read } for  pid=16154 comm="rsync" name="os" dev=dm-1 ino=10878979 scontext=system_u:system_r:cobblerd_t:s0 tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=dir
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378316140.405:529188): arch=c000003e syscall=2 success=yes exit=3 a0=7fff8a56a1e0 a1=90800 a2=7fff8a56a1e0 a3=8 items=0 ppid=3541 pid=16154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:cobblerd_t:s0 key=(null)
>/var/log/audit/audit.log.1:type=AVC msg=audit(1378316140.433:529189): avc:  denied  { getattr } for  pid=16154 comm="rsync" path="/srv/www/mirrors/scientific/6.4/x86_64/os/images/xen" dev=dm-1 ino=11141123 scontext=system_u:system_r:cobblerd_t:s0 tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=lnk_file
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378316140.433:529189): arch=c000003e syscall=6 success=yes exit=0 a0=7fff8a564cd0 a1=7fff8a563c40 a2=7fff8a563c40 a3=0 items=0 ppid=3541 pid=16154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:cobblerd_t:s0 key=(null)
>/var/log/audit/audit.log.1:type=AVC msg=audit(1378316140.433:529190): avc:  denied  { read } for  pid=16154 comm="rsync" name="xen" dev=dm-1 ino=11141123 scontext=system_u:system_r:cobblerd_t:s0 tcontext=unconfined_u:object_r:httpd_sys_content_t:s0 tclass=lnk_file
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378316140.433:529190): arch=c000003e syscall=89 success=yes exit=7 a0=7fff8a564cd0 a1=7fff8a563cd0 a2=fff a3=0 items=0 ppid=3541 pid=16154 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:cobblerd_t:s0 key=(null)
>/var/log/audit/audit.log.1:type=AVC msg=audit(1378316228.511:529191): avc:  denied  { write } for  pid=16780 comm="cobblerd" name="tftp" dev=sda3 ino=2100006 scontext=system_u:system_r:cobblerd_t:s0 tcontext=system_u:object_r:etc_t:s0 tclass=file
>/var/log/audit/audit.log.1:type=SYSCALL msg=audit(1378316228.511:529191): arch=c000003e syscall=2 success=yes exit=32 a0=7ff438005b10 a1=242 a2=1b6 a3=0 items=0 ppid=1 pid=16780 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="cobblerd" exe="/usr/bin/python" subj=system_u:system_r:cobblerd_t:s0 key=(null)

Actions: View

Attachments on bug 1038770: 833305