Attachment 844370 Details for Bug 1047039 – output of journalctl after rsyslog start

output of journalctl after rsyslog start

journalctl_at_rsyslog_start.log (text/x-log), 13.64 KB, created by Michal Minar on 2014-01-02 06:03:33 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Michal Minar

Created: 2014-01-02 06:03:33 UTC

Size: 13.64 KB

patch

obsolete

>-- Logs begin at Sun 2013-12-22 12:55:13 CET, end at Thu 2014-01-02 06:43:35 CET. --
>Jan 02 06:43:10 miminarnb fprintd[23223]: ** Message: No devices in use, exit
>Jan 02 06:43:17 miminarnb sudo[23339]: miminar : TTY=pts/8 ; PWD=/home/miminar ; USER=root ; COMMAND=/bin/systemctl stop rsyslog
>Jan 02 06:43:17 miminarnb systemd[1]: Stopped System Logging Service.
>Jan 02 06:43:24 miminarnb sudo[23367]: miminar : TTY=pts/8 ; PWD=/home/miminar ; USER=root ; COMMAND=/bin/systemctl start rsyslog
>Jan 02 06:43:24 miminarnb systemd[1]: Starting System Logging Service...
>Jan 02 06:43:24 miminarnb dbus-daemon[570]: dbus[570]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper)
>Jan 02 06:43:24 miminarnb dbus[570]: [system] Activating service name='org.fedoraproject.Setroubleshootd' (using servicehelper)
>Jan 02 06:43:24 miminarnb systemd[1]: Started System Logging Service.
>Jan 02 06:43:25 miminarnb dbus-daemon[570]: dbus[570]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd'
>Jan 02 06:43:25 miminarnb dbus[570]: [system] Successfully activated service 'org.fedoraproject.Setroubleshootd'
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: RunFaultServer(10)
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: created new database: name=setroubleshoot, friendly_name=Audit Listener, filepath=/var/lib/setroubleshoot/setroubleshoot_database.xml
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: database version 3.0 compatible with current 3.0 version
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: load_plugins() names=['allow_anon_write', 'allow_execheap', 'allow_execmod', 'allow_execstack', 'allow_ftpd_use_cifs', 'allow_ftpd_use_nfs', 'associate', 'automount_exec_config', 'bind_ports', 'catchall', 'catchall_boolean', 'catchall_labels', 'chrome', 'connect_ports', 'cvs_data', 'dac_override', 'device', 'disable_ipv6', 'file', 'filesystem_associate', 'httpd_can_sendmail', 'httpd_write_content', 'kernel_modules', 'leaks', 'mmap_zero', 'mounton', 'mozplugger', 'mozplugger_remove', 'openvpn', 'public_content', 'qemu_blk_image', 'qemu_file_image', 'restorecon', 'rsync_data', 'samba_share', 'sandbox_connect', 'selinuxpolicy', 'setenforce', 'sshd_root', 'swapfile', 'sys_module', 'sys_resource', 'vbetool', 'wine', 'xen_image']
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: Number of Plugins = 45
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: parse_socket_address_list: input='{unix}/var/run/setroubleshoot/setroubleshoot_server'
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: parse_socket_address_list: {unix}/var/run/setroubleshoot/setroubleshoot_server --> {unix}/var/run/setroubleshoot/setroubleshoot_server socket=None
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: creating system dbus: bus_name=org.fedoraproject.Setroubleshootd object_path=/org/fedoraproject/Setroubleshootd interface=org.fedoraproject.SetroubleshootdIface
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: dbus __init__ /org/fedoraproject/Setroubleshootd called
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: dbus avc(node=miminarnb type=AVC msg=audit(1388641404.537:1946): avc:  denied  { append } for  pid=23369 comm="systemd-tty-ask" path="/dev/pts/8" dev="devpts" ino=11 scontext=system_u:system_r:systemd_passwd_agent_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>                                                 node=miminarnb type=SYSCALL msg=audit(1388641404.537:1946): arch=c000003e syscall=59 success=yes exit=0 a0=7fe2d20fcaf0 a1=7fff643de860 a2=7fff643dec88 a3=7fff643de8b0 items=0 ppid=23368 pid=23369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=pts8 comm="systemd-tty-ask" exe="/usr/bin/systemd-tty-ask-password-agent" subj=system_u:system_r:systemd_passwd_agent_t:s0 key=(null)
>                                                 node=miminarnb type=EOE msg=audit(1388641404.537:1946): 
>                                                 ) called: 1 Connections
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: AuditRecordReceiver.add_record_to_cache(): node=miminarnb type=AVC msg=audit(1388641404.537:1946): avc:  denied  { append } for  pid=23369 comm="systemd-tty-ask" path="/dev/pts/8" dev="devpts" ino=11 scontext=system_u:system_r:systemd_passwd_agent_t:s0 tcontext=system_u:object_r:devpts_t:s0 tclass=chr_file
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: AuditRecordReceiver.add_record_to_cache(): node=miminarnb type=SYSCALL msg=audit(1388641404.537:1946): arch=c000003e syscall=59 success=yes exit=0 a0=7fe2d20fcaf0 a1=7fff643de860 a2=7fff643dec88 a3=7fff643de8b0 items=0 ppid=23368 pid=23369 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 ses=4294967295 tty=pts8 comm="systemd-tty-ask" exe="/usr/bin/systemd-tty-ask-password-agent" subj=system_u:system_r:systemd_passwd_agent_t:s0 key=(null)
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: AuditRecordReceiver.add_record_to_cache(): node=miminarnb type=EOE msg=audit(1388641404.537:1946):
>Jan 02 06:43:25 miminarnb setroubleshoot[23372]: analyze_avc() avc=scontext=system_u:system_r:systemd_passwd_agent_t:s0 tcontext=system_u:object_r:devpts_t:s0 access=['append'] tclass=chr_file tpath=/dev/pts/8
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: lookup_signature: found 1 matches with scores 1.00
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: signature found in database
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: sending alert to all clients
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: SELinux is preventing /usr/bin/systemd-tty-ask-password-agent from append access on the chr_file /dev/pts/8. For complete SELinux messages. run sealert -l 63f911da-bf9b-470a-bef4-7af818d00e6b
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() names=['allow_anon_write', 'allow_execheap', 'allow_execmod', 'allow_execstack', 'allow_ftpd_use_cifs', 'allow_ftpd_use_nfs', 'associate', 'automount_exec_config', 'bind_ports', 'catchall', 'catchall_boolean', 'catchall_labels', 'chrome', 'connect_ports', 'cvs_data', 'dac_override', 'device', 'disable_ipv6', 'file', 'filesystem_associate', 'httpd_can_sendmail', 'httpd_write_content', 'kernel_modules', 'leaks', 'mmap_zero', 'mounton', 'mozplugger', 'mozplugger_remove', 'openvpn', 'public_content', 'qemu_blk_image', 'qemu_file_image', 'restorecon', 'rsync_data', 'samba_share', 'sandbox_connect', 'selinuxpolicy', 'setenforce', 'sshd_root', 'swapfile', 'sys_module', 'sys_resource', 'vbetool', 'wine', 'xen_image']
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.allow_anon_write previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.allow_execheap previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.allow_execmod previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.allow_execstack previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.allow_ftpd_use_cifs previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.allow_ftpd_use_nfs previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.associate previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.automount_exec_config previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.bind_ports previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.catchall previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.catchall_boolean previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.catchall_labels previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.chrome previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.connect_ports previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.cvs_data previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.dac_override previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.device previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.disable_ipv6 previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.file previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.filesystem_associate previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.httpd_can_sendmail previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.httpd_write_content previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.kernel_modules previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.leaks previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.mmap_zero previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.mounton previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.mozplugger previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.mozplugger_remove previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.openvpn previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.public_content previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.qemu_blk_image previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.qemu_file_image previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.restorecon previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.rsync_data previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.samba_share previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.sandbox_connect previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.selinuxpolicy previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.setenforce previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.sshd_root previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.swapfile previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.sys_module previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.sys_resource previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.vbetool previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.wine previously imported
>Jan 02 06:43:26 miminarnb setroubleshoot[23372]: load_plugins() plugins.xen_image previously imported
>Jan 02 06:43:26 miminarnb python[23372]: SELinux is preventing /usr/bin/systemd-tty-ask-password-agent from append access on the chr_file /dev/pts/8.
>                                         
>                                         *****  Plugin catchall_boolean (53.8 confidence) suggests   ******************
>                                         
>                                         If you want to allow daemons to use tty
>                                         Then you must tell SELinux about this by enabling the 'daemons_use_tty' boolean.
>                                         You can read 'None' man page for more details.
>                                         Do
>                                         setsebool -P daemons_use_tty 1
>                                         
>                                         *****  Plugin leaks (40.5 confidence) suggests   *****************************
>                                         
>                                         If you want to ignore systemd-tty-ask-password-agent trying to append access the 8 chr_file, because you believe it should not need this access.
>                                         Then you should report this as a bug.  
>                                         You can generate a local policy module to dontaudit this access.
>                                         Do
>                                         # grep /usr/bin/systemd-tty-ask-password-agent /var/log/audit/audit.log | audit2allow -D -M mypol
>                                         # semodule -i mypol.pp
>                                         
>                                         *****  Plugin catchall (7.16 confidence) suggests   **************************
>                                         
>                                         If you believe that systemd-tty-ask-password-agent should be allowed append access on the 8 chr_file by default.
>                                         Then you should report this as a bug.
>                                         You can generate a local policy module to allow this access.
>                                         Do
>                                         allow this access for now by executing:
>                                         # grep systemd-tty-ask /var/log/audit/audit.log | audit2allow -M mypol
>                                         # semodule -i mypol.pp
>                                         
>Jan 02 06:43:35 miminarnb setroubleshoot[23372]: received signal=14
>Jan 02 06:43:35 miminarnb setroubleshoot[23372]: KeyboardInterrupt in RunFaultServer
>Jan 02 06:43:35 miminarnb setroubleshoot[23372]: writing database (/var/lib/setroubleshoot/setroubleshoot_database.xml) modified_count=1

Actions: View

Attachments on bug 1047039: 843494 | 844370 | 854746 | 868335 | 868336 | 893030