Attachment 834391 Details for Bug 1039637 – audit log filtered for qpidd denials

audit log filtered for qpidd denials

log (text/plain), 4.47 KB, created by mkovacik on 2013-12-09 16:40:06 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: mkovacik

Created: 2013-12-09 16:40:06 UTC

Size: 4.47 KB

patch

obsolete

>[root@ec2-54-216-182-120 ~]# grep -i avc /var/log/audit/audit.log | grep qpid
>type=AVC msg=audit(1386606148.405:241): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606148.406:242): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606148.408:243): avc:  denied  { getattr } for  pid=2217 comm="qpidd" path="/etc/passwd" dev="xvda1" ino=18675 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1386606148.408:244): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606148.408:245): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606148.409:246): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606148.409:247): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606150.581:248): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606150.582:249): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606150.582:250): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606150.583:251): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606150.583:252): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606150.583:253): avc:  denied  { search } for  pid=2217 comm="qpidd" name="pulp" dev="xvda1" ino=252919 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606591.602:287): avc:  denied  { search } for  pid=13790 comm="qpidd" name="qpid" dev="xvda1" ino=254640 scontext=system_u:system_r:qpidd_t:s0 tcontext=unconfined_u:object_r:pulp_cert_t:s0 tclass=dir
>type=AVC msg=audit(1386606591.602:287): avc:  denied  { getattr } for  pid=13790 comm="qpidd" path="/etc/pki/pulp/qpid/nss/secmod.db" dev="xvda1" ino=254829 scontext=system_u:system_r:qpidd_t:s0 tcontext=unconfined_u:object_r:pulp_cert_t:s0 tclass=file
>type=AVC msg=audit(1386606591.603:288): avc:  denied  { read } for  pid=13790 comm="qpidd" name="secmod.db" dev="xvda1" ino=254829 scontext=system_u:system_r:qpidd_t:s0 tcontext=unconfined_u:object_r:pulp_cert_t:s0 tclass=file
>type=AVC msg=audit(1386606591.603:288): avc:  denied  { open } for  pid=13790 comm="qpidd" path="/etc/pki/pulp/qpid/nss/secmod.db" dev="xvda1" ino=254829 scontext=system_u:system_r:qpidd_t:s0 tcontext=unconfined_u:object_r:pulp_cert_t:s0 tclass=file
>type=AVC msg=audit(1386606591.624:289): avc:  denied  { getattr } for  pid=13790 comm="qpidd" path="/etc/passwd" dev="xvda1" ino=26246 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1386606591.624:290): avc:  denied  { read } for  pid=13790 comm="qpidd" name="passwd" dev="xvda1" ino=26246 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1386606591.624:290): avc:  denied  { open } for  pid=13790 comm="qpidd" path="/etc/passwd" dev="xvda1" ino=26246 scontext=system_u:system_r:qpidd_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>[root@ec2-54-216-182-120 ~]#

Actions: View

Attachments on bug 1039637: 834391