Attachment 867556 Details for Bug 1069670 – More complete list of rawhide AVCs

More complete list of rawhide AVCs

file_1069670.txt (text/plain), 8.38 KB, created by Bruno Wolff III on 2014-02-25 17:11:02 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Bruno Wolff III

Created: 2014-02-25 17:11:02 UTC

Size: 8.38 KB

patch

obsolete

>[root@cerberus bruno]# grep -i 'avc.*httpd' /var/log/audit/audit.log
>type=AVC msg=audit(1393347731.865:66427): avc:  denied  { search } for  pid=11042 comm="httpd" name="tmp" dev="tmpfs" ino=24408592 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347731.865:66428): avc:  denied  { search } for  pid=11042 comm="httpd" name="tmp" dev="dm-1" ino=303426 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347731.884:66429): avc:  denied  { search } for  pid=11042 comm="httpd" name="tmp" dev="dm-1" ino=303426 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347731.884:66430): avc:  denied  { search } for  pid=11042 comm="httpd" name="tmp" dev="tmpfs" ino=24408592 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347731.884:66431): avc:  denied  { write } for  pid=11042 comm="httpd" name="/" dev="dm-1" ino=2 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1393347737.908:66432): avc:  denied  { getattr } for  pid=11042 comm="/usr/sbin/httpd" path="/tmp" dev="tmpfs" ino=24408592 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347737.908:66433): avc:  denied  { getattr } for  pid=11042 comm="/usr/sbin/httpd" path="/var/tmp" dev="dm-1" ino=303426 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347737.908:66434): avc:  denied  { getattr } for  pid=11042 comm="/usr/sbin/httpd" path="/var/tmp" dev="dm-1" ino=303426 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347738.006:66435): avc:  denied  { getattr } for  pid=11047 comm="nss_pcache" path="/tmp" dev="tmpfs" ino=24408592 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347738.006:66436): avc:  denied  { getattr } for  pid=11047 comm="nss_pcache" path="/var/tmp" dev="dm-1" ino=303426 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347738.006:66437): avc:  denied  { getattr } for  pid=11047 comm="nss_pcache" path="/var/tmp" dev="dm-1" ino=303426 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347739.052:66438): avc:  denied  { search } for  pid=11042 comm="/usr/sbin/httpd" name="tmp" dev="tmpfs" ino=24408592 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347739.052:66439): avc:  denied  { search } for  pid=11042 comm="/usr/sbin/httpd" name="tmp" dev="dm-1" ino=303426 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347739.053:66440): avc:  denied  { search } for  pid=11042 comm="/usr/sbin/httpd" name="tmp" dev="dm-1" ino=303426 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347739.053:66441): avc:  denied  { search } for  pid=11042 comm="/usr/sbin/httpd" name="tmp" dev="tmpfs" ino=24408592 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347739.053:66442): avc:  denied  { write } for  pid=11042 comm="/usr/sbin/httpd" name="/" dev="dm-1" ino=2 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir
>type=AVC msg=audit(1393347743.611:66443): avc:  denied  { search } for  pid=11042 comm="/usr/sbin/httpd" name="tmp" dev="tmpfs" ino=24408592 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347926.860:66470): avc:  denied  { write } for  pid=11191 comm="httpd" name="tmp" dev="tmpfs" ino=24432483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347926.860:66470): avc:  denied  { add_name } for  pid=11191 comm="httpd" name="apr-tmp.r0T9A5" scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347926.860:66470): avc:  denied  { create } for  pid=11191 comm="httpd" name="apr-tmp.r0T9A5" scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>type=AVC msg=audit(1393347926.860:66470): avc:  denied  { write open } for  pid=11191 comm="httpd" path="/tmp/apr-tmp.r0T9A5" dev="tmpfs" ino=24433403 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>type=AVC msg=audit(1393347926.860:66471): avc:  denied  { remove_name } for  pid=11191 comm="httpd" name="apr-tmp.r0T9A5" dev="tmpfs" ino=24433403 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347926.860:66471): avc:  denied  { unlink } for  pid=11191 comm="httpd" name="apr-tmp.r0T9A5" dev="tmpfs" ino=24433403 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>type=AVC msg=audit(1393347928.913:66472): avc:  denied  { getattr } for  pid=11191 comm="/usr/sbin/httpd" path="/tmp" dev="tmpfs" ino=24432483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347928.913:66473): avc:  denied  { read } for  pid=11191 comm="/usr/sbin/httpd" name="tmp" dev="tmpfs" ino=24432483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347928.913:66473): avc:  denied  { open } for  pid=11191 comm="/usr/sbin/httpd" path="/tmp" dev="tmpfs" ino=24432483 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=dir
>type=AVC msg=audit(1393347934.251:66475): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="openvpn" dev="dm-1" ino=1705103 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:openvpn_etc_t:s0 tclass=dir
>type=AVC msg=audit(1393347934.324:66476): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="chrony" dev="dm-1" ino=271830 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:chronyd_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1393347934.398:66477): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="nagios" dev="dm-1" ino=1190442 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:nagios_spool_t:s0 tclass=dir
>type=AVC msg=audit(1393347934.429:66478): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="clamav" dev="dm-1" ino=295518 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:antivirus_db_t:s0 tclass=dir
>type=AVC msg=audit(1393347934.883:66479): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="boinc" dev="dm-1" ino=2390021 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:boinc_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1393347934.989:66480): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="condor" dev="dm-1" ino=295522 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:condor_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1393347935.002:66481): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="munin" dev="dm-1" ino=400958 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:munin_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1393347935.118:66482): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="games" dev="dm-1" ino=263468 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:games_data_t:s0 tclass=dir
>type=AVC msg=audit(1393347935.154:66483): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="ntop" dev="dm-1" ino=2655739 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:ntop_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1393347935.274:66484): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="vnstat" dev="dm-1" ino=2660030 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:vnstatd_var_lib_t:s0 tclass=dir
>type=AVC msg=audit(1393347935.333:66485): avc:  denied  { search } for  pid=11200 comm="/usr/sbin/httpd" name="couchdb" dev="dm-1" ino=301317 scontext=system_u:system_r:httpd_t:s0 tcontext=system_u:object_r:couchdb_var_lib_t:s0 tclass=dir

Actions: View

Attachments on bug 1069670: 867431 | 867556