Attachment 860029 Details for Bug 1058116 – audit.log from user_u login with vmtools_helper_t module

audit.log from user_u login with vmtools_helper_t module

file_1058116.txt (text/plain), 6.99 KB, created by John Brooks on 2014-02-06 07:32:52 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: John Brooks

Created: 2014-02-06 07:32:52 UTC

Size: 6.99 KB

patch

obsolete

>type=AVC msg=audit(1391671191.549:4225): avc:  denied  { read write } for  pid=23190 comm="vmware-user-sui" path="socket:[418073]" dev="sockfs" ino=418073 scontext=user_u:user_r:vmtools_helper_t:s0 tcontext=user_u:user_r:user_t:s0 tclass=unix_stream_socket
>type=AVC msg=audit(1391671191.549:4225): avc:  denied  { rlimitinh } for  pid=23190 comm="vmware-user-sui" scontext=user_u:user_r:user_t:s0 tcontext=user_u:user_r:vmtools_helper_t:s0 tclass=process
>type=AVC msg=audit(1391671191.549:4225): avc:  denied  { siginh } for  pid=23190 comm="vmware-user-sui" scontext=user_u:user_r:user_t:s0 tcontext=user_u:user_r:vmtools_helper_t:s0 tclass=process
>type=AVC msg=audit(1391671191.549:4225): avc:  denied  { noatsecure } for  pid=23190 comm="vmware-user-sui" scontext=user_u:user_r:user_t:s0 tcontext=user_u:user_r:vmtools_helper_t:s0 tclass=process
>type=SYSCALL msg=audit(1391671191.549:4225): arch=c000003e syscall=59 success=yes exit=0 a0=1f20370 a1=1f20350 a2=1f203c0 a3=14 items=0 ppid=22886 pid=23190 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmware-user-sui" exe="/usr/bin/vmware-user-suid-wrapper" subj=user_u:user_r:vmtools_helper_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1391671191.565:4226): security_compute_sid:  invalid context user_u:user_r:vmtools_t:s0 for scontext=user_u:user_r:vmtools_helper_t:s0 tcontext=system_u:object_r:vmtools_exec_t:s0 tclass=process
>type=AVC msg=audit(1391671191.565:4226): avc:  denied  { read write } for  pid=23195 comm="vmtoolsd" path="socket:[418073]" dev="sockfs" ino=418073 scontext=user_u:user_r:vmtools_t:s0 tcontext=user_u:user_r:user_t:s0 tclass=unix_stream_socket
>type=AVC msg=audit(1391671191.565:4226): avc:  denied  { rlimitinh } for  pid=23195 comm="vmtoolsd" scontext=user_u:user_r:vmtools_helper_t:s0 tcontext=user_u:user_r:vmtools_t:s0 tclass=process
>type=AVC msg=audit(1391671191.565:4226): avc:  denied  { siginh } for  pid=23195 comm="vmtoolsd" scontext=user_u:user_r:vmtools_helper_t:s0 tcontext=user_u:user_r:vmtools_t:s0 tclass=process
>type=AVC msg=audit(1391671191.565:4226): avc:  denied  { noatsecure } for  pid=23195 comm="vmtoolsd" scontext=user_u:user_r:vmtools_helper_t:s0 tcontext=user_u:user_r:vmtools_t:s0 tclass=process
>type=SYSCALL msg=audit(1391671191.565:4226): arch=c000003e syscall=59 success=yes exit=0 a0=7fff2af29df0 a1=7fff2af29db0 a2=7fff2af2af28 a3=ffffffff items=0 ppid=1 pid=23195 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmtoolsd" exe="/usr/bin/vmtoolsd" subj=user_u:user_r:vmtools_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1391671191.571:4227): security_compute_sid:  invalid context user_u:user_r:vmtools_t:s0 for scontext=user_u:user_r:vmtools_t:s0 tcontext=user_u:user_r:vmtools_t:s0 tclass=unix_dgram_socket
>type=SELINUX_ERR msg=audit(1391671191.571:4227): security_compute_sid:  invalid context user_u:user_r:vmtools_t:s0 for scontext=user_u:user_r:vmtools_t:s0 tcontext=user_u:user_r:vmtools_t:s0 tclass=unix_dgram_socket
>type=SYSCALL msg=audit(1391671191.571:4227): arch=c000003e syscall=41 success=yes exit=4 a0=1 a1=80002 a2=0 a3=6c items=0 ppid=1 pid=23195 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmtoolsd" exe="/usr/bin/vmtoolsd" subj=user_u:user_r:vmtools_t:s0 key=(null)
>type=SELINUX_ERR msg=audit(1391671191.628:4229): security_compute_sid:  invalid context user_u:user_r:vmtools_t:s0 for scontext=user_u:user_r:vmtools_t:s0 tcontext=user_u:user_r:vmtools_t:s0 tclass=unix_stream_socket
>type=SELINUX_ERR msg=audit(1391671191.628:4229): security_compute_sid:  invalid context user_u:user_r:vmtools_t:s0 for scontext=user_u:user_r:vmtools_t:s0 tcontext=user_u:user_r:vmtools_t:s0 tclass=unix_stream_socket
>type=SYSCALL msg=audit(1391671191.628:4229): arch=c000003e syscall=41 success=yes exit=7 a0=1 a1=80001 a2=0 a3=7fff9ab2b8b3 items=0 ppid=1 pid=23195 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmtoolsd" exe="/usr/bin/vmtoolsd" subj=user_u:user_r:vmtools_t:s0 key=(null)
>type=AVC msg=audit(1391671191.628:4230): avc:  denied  { connectto } for  pid=23195 comm="vmtoolsd" path=002F746D702F2E5831312D756E69782F5830 scontext=user_u:user_r:vmtools_t:s0 tcontext=system_u:system_r:xserver_t:s0-s0:c0.c1023 tclass=unix_stream_socket
>type=SYSCALL msg=audit(1391671191.628:4230): arch=c000003e syscall=42 success=yes exit=0 a0=7 a1=7fff9ab2b8b0 a2=14 a3=7fff9ab2b8b3 items=0 ppid=1 pid=23195 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmtoolsd" exe="/usr/bin/vmtoolsd" subj=user_u:user_r:vmtools_t:s0 key=(null)
>type=AVC msg=audit(1391671191.628:4231): avc:  denied  { read } for  pid=23195 comm="vmtoolsd" name="database" dev="tmpfs" ino=421923 scontext=user_u:user_r:vmtools_t:s0 tcontext=system_u:object_r:xdm_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1391671191.628:4231): arch=c000003e syscall=21 success=yes exit=0 a0=7fff9ab2cdd7 a1=4 a2=8 a3=0 items=0 ppid=1 pid=23195 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmtoolsd" exe="/usr/bin/vmtoolsd" subj=user_u:user_r:vmtools_t:s0 key=(null)
>type=AVC msg=audit(1391671191.628:4232): avc:  denied  { open } for  pid=23195 comm="vmtoolsd" path="/run/gdm/auth-for-restricted-iPdP4Z/database" dev="tmpfs" ino=421923 scontext=user_u:user_r:vmtools_t:s0 tcontext=system_u:object_r:xdm_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1391671191.628:4232): arch=c000003e syscall=2 success=yes exit=8 a0=7fff9ab2cdd7 a1=0 a2=1b6 a3=1 items=0 ppid=1 pid=23195 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmtoolsd" exe="/usr/bin/vmtoolsd" subj=user_u:user_r:vmtools_t:s0 key=(null)
>type=AVC msg=audit(1391671191.628:4233): avc:  denied  { getattr } for  pid=23195 comm="vmtoolsd" path="/run/gdm/auth-for-restricted-iPdP4Z/database" dev="tmpfs" ino=421923 scontext=user_u:user_r:vmtools_t:s0 tcontext=system_u:object_r:xdm_var_run_t:s0 tclass=file
>type=SYSCALL msg=audit(1391671191.628:4233): arch=c000003e syscall=5 success=yes exit=0 a0=8 a1=7fff9ab2b430 a2=7fff9ab2b430 a3=1 items=0 ppid=1 pid=23195 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmtoolsd" exe="/usr/bin/vmtoolsd" subj=user_u:user_r:vmtools_t:s0 key=(null)
>type=AVC msg=audit(1391671191.650:4234): avc:  denied  { search } for  pid=23195 comm="vmtoolsd" name="restricted" dev="dm-1" ino=548889 scontext=user_u:user_r:vmtools_t:s0 tcontext=unconfined_u:object_r:user_home_dir_t:s0 tclass=dir
>type=SYSCALL msg=audit(1391671191.650:4234): arch=c000003e syscall=2 success=no exit=-2 a0=7fff9ab29cc0 a1=0 a2=6d a3=10 items=0 ppid=1 pid=23195 auid=1001 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=1001 sgid=1001 fsgid=1001 ses=142 tty=(none) comm="vmtoolsd" exe="/usr/bin/vmtoolsd" subj=user_u:user_r:vmtools_t:s0 key=(null)

Actions: View

Attachments on bug 1058116: 860029