Attachment 843129 Details for Bug 1047166 – Tested with 'setenforce=1' showing AVC and resultant failures.

Tested with 'setenforce=1' showing AVC and resultant failures.

logging-enforcing=1 (text/plain), 1.19 KB, created by John Florian on 2013-12-29 18:10:21 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: John Florian

Created: 2013-12-29 18:10:21 UTC

Size: 1.19 KB

patch

obsolete

>==> /var/log/shorewall-init.log <==
>Dec 29 12:49:55   ERROR: Required interface enp3s0 not available
>
>==> /var/log/messages <==
>Dec 29 12:49:55 neptune-f19 logger: ERROR:Shorewall start failed:Firewall state not changed
>
>==> /var/log/shorewall-init.log <==
>Dec 29 12:49:55   ERROR:Shorewall start failed:Firewall state not changed
>
>==> /var/log/audit/audit.log <==
>type=AVC msg=audit(1388339395.317:513): avc:  denied  { signal } for  pid=6022 comm="sh" scontext=system_u:system_r:shorewall_t:s0 tcontext=system_u:system_r:shorewall_t:s0 tclass=process
>type=SYSCALL msg=audit(1388339395.317:513): arch=c000003e syscall=62 success=no exit=-13 a0=1786 a1=f a2=0 a3=7fffeacdfd30 items=0 ppid=5868 pid=6022 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=(none) comm="sh" exe="/usr/bin/bash" subj=system_u:system_r:shorewall_t:s0 key=(null)
>
>==> /var/log/messages <==
>Dec 29 12:49:55 neptune-f19 shorewall[5868]: /var/lib/shorewall/.start: line 1079: kill: (6022) - Permission denied
>Dec 29 12:49:55 neptune-f19 systemd[1]: shorewall.service: main process exited, code=exited, status=2/INVALIDARGUMENT
>Dec 29 12:49:55 neptune-f19 systemd[1]: Failed to start Shorewall IPv4 firewall.
>

Actions: View

Attachments on bug 1047166: 843129 | 843130