Attachment 874206 Details for Bug 1076250 – AVCs

AVCs

denials (text/plain), 4.03 KB, created by William Brown on 2014-03-14 02:41:49 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: William Brown

Created: 2014-03-14 02:41:49 UTC

Size: 4.03 KB

patch

obsolete

>type=AVC msg=audit(1394764513.877:4433): avc:  denied  { write } for  pid=27905 comm="ipa-backup" name="ipa_memcached" dev="tmpfs" ino=98000 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memcached_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1394764516.135:4434): avc:  denied  { write } for  pid=27905 comm="ipa-backup" name="slapd-IPA-EXAMPLE-NET-AU.socket" dev="tmpfs" ino=97141 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dirsrv_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1394764516.139:4435): avc:  denied  { write } for  pid=27905 comm="ipa-backup" name="slapd-IPA-EXAMPLE-NET-AU.socket" dev="tmpfs" ino=97141 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dirsrv_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1394764516.141:4436): avc:  denied  { write } for  pid=27905 comm="ipa-backup" name="slapd-IPA-EXAMPLE-NET-AU.socket" dev="tmpfs" ino=97141 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dirsrv_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1394764549.519:4449): avc:  denied  { execute } for  pid=28012 comm="ipa-backup" name="db2ldif" dev="dm-3" ino=17427156 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:dirsrv_var_lib_t:s0 tclass=file
>type=AVC msg=audit(1394764683.329:4451): avc:  denied  { write } for  pid=28024 comm="ipa-backup" name="ipa_memcached" dev="tmpfs" ino=98000 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:memcached_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1394764688.236:4454): avc:  denied  { write } for  pid=28024 comm="ipa-backup" name="slapd-IPA-EXAMPLE-NET-AU.socket" dev="tmpfs" ino=464889 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:object_r:dirsrv_var_run_t:s0 tclass=sock_file
>type=AVC msg=audit(1394764688.236:4454): avc:  denied  { connectto } for  pid=28024 comm="ipa-backup" path="/run/slapd-IPA-EXAMPLE-NET-AU.socket" scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dirsrv_t:s0 tclass=unix_stream_socket
>type=AVC msg=audit(1394764695.505:4456): avc:  denied  { execute } for  pid=28192 comm="ipa-backup" name="db2ldif" dev="dm-3" ino=17427156 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:dirsrv_var_lib_t:s0 tclass=file
>type=AVC msg=audit(1394764695.505:4456): avc:  denied  { execute_no_trans } for  pid=28192 comm="ipa-backup" path="/var/lib/dirsrv/scripts-IPA-EXAMPLE-NET-AU/db2ldif" dev="dm-3" ino=17427156 scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:dirsrv_var_lib_t:s0 tclass=file
>type=AVC msg=audit(1394764725.443:4458): avc:  denied  { connectto } for  pid=28348 comm="ipactl" path="/run/slapd-IPA-EXAMPLE-NET-AU.socket" scontext=staff_u:sysadm_r:sysadm_t:s0-s0:c0.c1023 tcontext=system_u:system_r:dirsrv_t:s0 tclass=unix_stream_socket
>type=AVC msg=audit(1394764732.997:4464): avc:  denied  { search } for  pid=28655 comm="java" name="net" dev="proc" ino=11788 scontext=system_u:system_r:pki_tomcat_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir
>type=AVC msg=audit(1394764732.997:4464): avc:  denied  { net_admin } for  pid=28655 comm="java" capability=12  scontext=system_u:system_r:pki_tomcat_t:s0 tcontext=system_u:system_r:pki_tomcat_t:s0 tclass=capability
>type=AVC msg=audit(1394764732.997:4464): avc:  denied  { read } for  pid=28655 comm="java" name="ip_local_port_range" dev="proc" ino=467875 scontext=system_u:system_r:pki_tomcat_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file
>type=AVC msg=audit(1394764732.997:4464): avc:  denied  { open } for  pid=28655 comm="java" path="/proc/sys/net/ipv4/ip_local_port_range" dev="proc" ino=467875 scontext=system_u:system_r:pki_tomcat_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file
>type=AVC msg=audit(1394764733.010:4465): avc:  denied  { getattr } for  pid=28655 comm="java" path="/proc/sys/net/ipv4/ip_local_port_range" dev="proc" ino=467875 scontext=system_u:system_r:pki_tomcat_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file
>

Actions: View

Attachments on bug 1076250: 874206