Attachment 840914 Details for Bug 1046112 – 'journalctl -b | grep sssd' output on affected system, showing the denials

'journalctl -b | grep sssd' output on affected system, showing the denials

sssd (text/plain), 36.33 KB, created by Adam Williamson on 2013-12-23 17:49:40 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Williamson

Created: 2013-12-23 17:49:40 UTC

Size: 36.33 KB

patch

obsolete

>Dec 23 09:32:57 adam.happyassassin.net sssd[950]: Starting up
>Dec 23 09:32:57 adam.happyassassin.net sssd[be[951]: Starting up
>Dec 23 09:32:57 adam.happyassassin.net sssd[970]: Starting up
>Dec 23 09:32:57 adam.happyassassin.net sssd[971]: Starting up
>Dec 23 09:32:57 adam.happyassassin.net sssd[972]: Starting up
>Dec 23 09:32:57 adam.happyassassin.net sssd[973]: Starting up
>Dec 23 09:32:57 adam.happyassassin.net sssd[975]: Starting up
>Dec 23 09:32:59 adam.happyassassin.net setroubleshoot[955]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387819977.525:33): avc:  denied  { execstack } for  pid=951 comm="sssd_be" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=AVC msg=audit(1387819977.525:33): avc:  denied  { execmem } for  pid=951 comm="sssd_be" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=SYSCALL msg=audit(1387819977.525:33): arch=c000003e syscall=10 success=yes exit=0 a0=7fff6166c000 a1=1000 a2=1000007 a3=0 items=0 ppid=950 pid=951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sssd_be" exe="/usr/libexec/sssd/sssd_be" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:32:59 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819977.525:33): avc:  denied  { execstack } for  pid=951 comm="sssd_be" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:32:59 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819977.525:33): avc:  denied  { execmem } for  pid=951 comm="sssd_be" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:32:59 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387819977.525:33): arch=c000003e syscall=10 success=yes exit=0 a0=7fff6166c000 a1=1000 a2=1000007 a3=0 items=0 ppid=950 pid=951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sssd_be" exe="/usr/libexec/sssd/sssd_be" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:32:59 adam.happyassassin.net setroubleshoot[955]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387819977.525:33): avc:  denied  { execstack } for  pid=951 comm="sssd_be" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=AVC msg=audit(1387819977.525:33): avc:  denied  { execmem } for  pid=951 comm="sssd_be" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=SYSCALL msg=audit(1387819977.525:33): arch=c000003e syscall=10 success=yes exit=0 a0=7fff6166c000 a1=1000 a2=1000007 a3=0 items=0 ppid=950 pid=951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sssd_be" exe="/usr/libexec/sssd/sssd_be" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:32:59 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819977.525:33): avc:  denied  { execstack } for  pid=951 comm="sssd_be" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:32:59 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819977.525:33): avc:  denied  { execmem } for  pid=951 comm="sssd_be" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:32:59 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387819977.525:33): arch=c000003e syscall=10 success=yes exit=0 a0=7fff6166c000 a1=1000 a2=1000007 a3=0 items=0 ppid=950 pid=951 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sssd_be" exe="/usr/libexec/sssd/sssd_be" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:00 adam.happyassassin.net setroubleshoot[955]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:33:00 adam.happyassassin.net setroubleshoot[955]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:33:00 adam.happyassassin.net setroubleshoot[955]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:33:00 adam.happyassassin.net python[955]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                    If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                    # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:33:01 adam.happyassassin.net setroubleshoot[955]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:33:01 adam.happyassassin.net python[955]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                    If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                    # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387819988.349:733): avc:  denied  { execstack } for  pid=2413 comm="ldap_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=AVC msg=audit(1387819988.349:733): avc:  denied  { execmem } for  pid=2413 comm="ldap_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=SYSCALL msg=audit(1387819988.349:733): arch=c000003e syscall=10 success=yes exit=0 a0=7fff42c35000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ldap_child" exe="/usr/libexec/sssd/ldap_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819988.349:733): avc:  denied  { execstack } for  pid=2413 comm="ldap_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819988.349:733): avc:  denied  { execmem } for  pid=2413 comm="ldap_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387819988.349:733): arch=c000003e syscall=10 success=yes exit=0 a0=7fff42c35000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ldap_child" exe="/usr/libexec/sssd/ldap_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387819988.349:733): avc:  denied  { execstack } for  pid=2413 comm="ldap_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=AVC msg=audit(1387819988.349:733): avc:  denied  { execmem } for  pid=2413 comm="ldap_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                            node=adam.happyassassin.net type=SYSCALL msg=audit(1387819988.349:733): arch=c000003e syscall=10 success=yes exit=0 a0=7fff42c35000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ldap_child" exe="/usr/libexec/sssd/ldap_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819988.349:733): avc:  denied  { execstack } for  pid=2413 comm="ldap_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387819988.349:733): avc:  denied  { execmem } for  pid=2413 comm="ldap_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387819988.349:733): arch=c000003e syscall=10 success=yes exit=0 a0=7fff42c35000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2413 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="ldap_child" exe="/usr/libexec/sssd/ldap_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 2
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:33:08 adam.happyassassin.net python[955]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                    If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                    # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 2
>Dec 23 09:33:08 adam.happyassassin.net setroubleshoot[955]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:33:08 adam.happyassassin.net python[955]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                    If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                    # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:33:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 2
>Dec 23 09:33:29 adam.happyassassin.net setroubleshoot[2454]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387820008.030:735): avc:  denied  { execstack } for  pid=2452 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=AVC msg=audit(1387820008.030:735): avc:  denied  { execmem } for  pid=2452 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=SYSCALL msg=audit(1387820008.030:735): arch=c000003e syscall=10 success=yes exit=0 a0=7fff5fbc0000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:29 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820008.30:735): avc:  denied  { execstack } for  pid=2452 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:29 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820008.30:735): avc:  denied  { execmem } for  pid=2452 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:29 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387820008.30:735): arch=c000003e syscall=10 success=yes exit=0 a0=7fff5fbc0000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:30 adam.happyassassin.net setroubleshoot[2454]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:33:30 adam.happyassassin.net setroubleshoot[2454]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387820008.030:735): avc:  denied  { execstack } for  pid=2452 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=AVC msg=audit(1387820008.030:735): avc:  denied  { execmem } for  pid=2452 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=SYSCALL msg=audit(1387820008.030:735): arch=c000003e syscall=10 success=yes exit=0 a0=7fff5fbc0000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:30 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820008.30:735): avc:  denied  { execstack } for  pid=2452 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:30 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820008.30:735): avc:  denied  { execmem } for  pid=2452 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:30 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387820008.30:735): arch=c000003e syscall=10 success=yes exit=0 a0=7fff5fbc0000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2452 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:30 adam.happyassassin.net setroubleshoot[2454]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:33:30 adam.happyassassin.net setroubleshoot[2454]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:33:30 adam.happyassassin.net python[2454]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                     If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                     # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:33:30 adam.happyassassin.net setroubleshoot[2454]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:33:30 adam.happyassassin.net python[2454]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                     If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                     # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387820016.306:748): avc:  denied  { execstack } for  pid=2521 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=AVC msg=audit(1387820016.306:748): avc:  denied  { execmem } for  pid=2521 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=SYSCALL msg=audit(1387820016.306:748): arch=c000003e syscall=10 success=yes exit=0 a0=7fff9bd9e000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820016.306:748): avc:  denied  { execstack } for  pid=2521 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820016.306:748): avc:  denied  { execmem } for  pid=2521 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387820016.306:748): arch=c000003e syscall=10 success=yes exit=0 a0=7fff9bd9e000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387820016.306:748): avc:  denied  { execstack } for  pid=2521 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=AVC msg=audit(1387820016.306:748): avc:  denied  { execmem } for  pid=2521 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=SYSCALL msg=audit(1387820016.306:748): arch=c000003e syscall=10 success=yes exit=0 a0=7fff9bd9e000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820016.306:748): avc:  denied  { execstack } for  pid=2521 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820016.306:748): avc:  denied  { execmem } for  pid=2521 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387820016.306:748): arch=c000003e syscall=10 success=yes exit=0 a0=7fff9bd9e000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2521 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:33:36 adam.happyassassin.net python[2454]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                     If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                     # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:33:36 adam.happyassassin.net setroubleshoot[2454]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:33:36 adam.happyassassin.net python[2454]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                     If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                     # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387820136.373:777): avc:  denied  { execstack } for  pid=2658 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=AVC msg=audit(1387820136.373:777): avc:  denied  { execmem } for  pid=2658 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=SYSCALL msg=audit(1387820136.373:777): arch=c000003e syscall=10 success=yes exit=0 a0=7fffe7194000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820136.373:777): avc:  denied  { execstack } for  pid=2658 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820136.373:777): avc:  denied  { execmem } for  pid=2658 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387820136.373:777): arch=c000003e syscall=10 success=yes exit=0 a0=7fffe7194000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387820136.373:777): avc:  denied  { execstack } for  pid=2658 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=AVC msg=audit(1387820136.373:777): avc:  denied  { execmem } for  pid=2658 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=SYSCALL msg=audit(1387820136.373:777): arch=c000003e syscall=10 success=yes exit=0 a0=7fffe7194000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820136.373:777): avc:  denied  { execstack } for  pid=2658 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820136.373:777): avc:  denied  { execmem } for  pid=2658 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387820136.373:777): arch=c000003e syscall=10 success=yes exit=0 a0=7fffe7194000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2658 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:35:36 adam.happyassassin.net python[2596]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                     If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                     # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:35:36 adam.happyassassin.net setroubleshoot[2596]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:35:36 adam.happyassassin.net python[2596]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                     If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                     # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387820878.533:851): avc:  denied  { execstack } for  pid=2902 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=AVC msg=audit(1387820878.533:851): avc:  denied  { execmem } for  pid=2902 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=SYSCALL msg=audit(1387820878.533:851): arch=c000003e syscall=10 success=yes exit=0 a0=7fff6c05e000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820878.533:851): avc:  denied  { execstack } for  pid=2902 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820878.533:851): avc:  denied  { execmem } for  pid=2902 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387820878.533:851): arch=c000003e syscall=10 success=yes exit=0 a0=7fff6c05e000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: dbus avc(node=adam.happyassassin.net type=AVC msg=audit(1387820878.533:851): avc:  denied  { execstack } for  pid=2902 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=AVC msg=audit(1387820878.533:851): avc:  denied  { execmem } for  pid=2902 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>                                                             node=adam.happyassassin.net type=SYSCALL msg=audit(1387820878.533:851): arch=c000003e syscall=10 success=yes exit=0 a0=7fff6c05e000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820878.533:851): avc:  denied  { execstack } for  pid=2902 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=AVC msg=audit(1387820878.533:851): avc:  denied  { execmem } for  pid=2902 comm="krb5_child" scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 tclass=process
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: AuditRecordReceiver.add_record_to_cache(): node=adam.happyassassin.net type=SYSCALL msg=audit(1387820878.533:851): arch=c000003e syscall=10 success=yes exit=0 a0=7fff6c05e000 a1=1000 a2=1000007 a3=0 items=0 ppid=951 pid=2902 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="krb5_child" exe="/usr/libexec/sssd/krb5_child" subj=system_u:system_r:sssd_t:s0 key=(null)
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: analyze_avc() avc=scontext=system_u:system_r:sssd_t:s0 tcontext=system_u:system_r:sssd_t:s0 access=['execstack'] tclass=process tpath=
>Dec 23 09:47:58 adam.happyassassin.net python[2837]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                     If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                     # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:47:58 adam.happyassassin.net setroubleshoot[2837]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process. For complete SELinux messages. run sealert -l b0cd54d3-1d5a-42fe-a945-1cd9cb896aa4
>Dec 23 09:47:58 adam.happyassassin.net python[2837]: SELinux is preventing /usr/libexec/sssd/sssd_be from using the execstack access on a process.
>                                                     If you believe that sssd_be should be allowed execstack access on processes labeled sssd_t by default.
>                                                     # grep sssd_be /var/log/audit/audit.log | audit2allow -M mypol
>Dec 23 09:48:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:48:08 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:48:09 adam.happyassassin.net sssd_be[951]: GSSAPI client step 1
>Dec 23 09:48:09 adam.happyassassin.net sssd_be[951]: GSSAPI client step 2

Actions: View

Attachments on bug 1046112: 840914