Attachment 891408 Details for Bug 1093297 – neutron AVCs

neutron AVCs

file_1093297.txt (text/plain), 4.51 KB, created by Ofer Blaut on 2014-05-01 08:40:36 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ofer Blaut

Created: 2014-05-01 08:40:36 UTC

Size: 4.51 KB

patch

obsolete

>[root@cougar16 ~(keystone_admin_tenant1)]$grep -i avc /var/log/messages  | grep neutron
>May  1 11:27:53 cougar16 kernel: type=1400 audit(1398932873.792:99): avc:  denied  { create } for  pid=11058 comm="ip" name="qrouter-28db7907-6998-42a6-8718-180cfad1061d" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>May  1 11:27:58 cougar16 kernel: type=1400 audit(1398932878.664:101): avc:  denied  { create } for  pid=11151 comm="ip" name="qrouter-28db7907-6998-42a6-8718-180cfad1061d" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>May  1 11:28:30 cougar16 kernel: type=1400 audit(1398932910.517:108): avc:  denied  { create } for  pid=11258 comm="ip" name="qrouter-28db7907-6998-42a6-8718-180cfad1061d" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=file
>May  1 11:29:24 cougar16 kernel: type=1400 audit(1398932964.947:118): avc:  denied  { name_connect } for  pid=24673 comm="neutron-server" dest=8774 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:osapi_compute_port_t:s0 tclass=tcp_socket
>May  1 11:31:18 cougar16 kernel: type=1400 audit(1398933078.036:140): avc:  denied  { signal } for  pid=24828 comm="sudo" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=process
>May  1 11:31:18 cougar16 kernel: type=1400 audit(1398933078.037:141): avc:  denied  { signal } for  pid=24828 comm="sudo" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=process
>May  1 11:31:18 cougar16 kernel: type=1400 audit(1398933078.038:142): avc:  denied  { signal } for  pid=24832 comm="ovsdb-client" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=process
>May  1 11:31:18 cougar16 kernel: type=1400 audit(1398933078.039:143): avc:  denied  { signal } for  pid=24832 comm="ovsdb-client" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=process
>May  1 11:31:18 cougar16 kernel: type=1400 audit(1398933078.039:144): avc:  denied  { signal } for  pid=24832 comm="ovsdb-client" scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:neutron_t:s0 tclass=process
>May  1 11:31:18 cougar16 kernel: type=1400 audit(1398933078.102:146): avc:  denied  { getattr } for  pid=11923 comm="ps" path="/proc/2" dev="proc" ino=11387 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=dir
>May  1 11:35:44 cougar16 kernel: type=1400 audit(1398933344.266:33): avc:  denied  { search } for  pid=5085 comm="sysctl" name="net" dev="proc" ino=7922 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir
>May  1 11:35:52 cougar16 kernel: type=1400 audit(1398933352.325:34): avc:  denied  { name_connect } for  pid=1302 comm="neutron-server" dest=8774 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:osapi_compute_port_t:s0 tclass=tcp_socket
>May  1 11:36:24 cougar16 kernel: type=1400 audit(1398933384.627:55): avc:  denied  { execute } for  pid=5520 comm="neutron-rootwra" name="arping" dev="sda5" ino=12455187 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file
>May  1 11:36:24 cougar16 kernel: type=1400 audit(1398933384.628:56): avc:  denied  { execute } for  pid=5520 comm="neutron-rootwra" name="arping" dev="sda5" ino=12455187 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file
>May  1 11:36:25 cougar16 kernel: type=1400 audit(1398933385.357:57): avc:  denied  { execute } for  pid=5571 comm="neutron-rootwra" name="arping" dev="sda5" ino=12455187 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file
>May  1 11:36:25 cougar16 kernel: type=1400 audit(1398933385.358:58): avc:  denied  { execute } for  pid=5571 comm="neutron-rootwra" name="arping" dev="sda5" ino=12455187 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file
>May  1 11:36:26 cougar16 kernel: type=1400 audit(1398933386.101:59): avc:  denied  { execute } for  pid=5628 comm="neutron-rootwra" name="arping" dev="sda5" ino=12455187 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file
>May  1 11:36:26 cougar16 kernel: type=1400 audit(1398933386.102:60): avc:  denied  { execute } for  pid=5628 comm="neutron-rootwra" name="arping" dev="sda5" ino=12455187 scontext=system_u:system_r:neutron_t:s0 tcontext=system_u:object_r:netutils_exec_t:s0 tclass=file

Actions: View

Attachments on bug 1093297: 891408 | 893389 | 893403