Attachment 908326 Details for Bug 1095869 – boot AVCs using nova networking

boot AVCs using nova networking

AVC-boot (text/plain), 4.16 KB, created by Lon Hohberger on 2014-06-12 22:31:24 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Lon Hohberger

Created: 2014-06-12 22:31:24 UTC

Size: 4.16 KB

patch

obsolete

>type=AVC msg=audit(1402611890.011:10008): avc:  denied  { read } for  pid=11083 comm="sudo" name="passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611890.011:10008): avc:  denied  { open } for  pid=11083 comm="sudo" path="/etc/passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611890.011:10009): avc:  denied  { getattr } for  pid=11083 comm="sudo" path="/etc/passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611890.888:10079): avc:  denied  { search } for  pid=11138 comm="sysctl" name="net" dev="proc" ino=1305 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir
>type=AVC msg=audit(1402611890.888:10079): avc:  denied  { getattr } for  pid=11138 comm="sysctl" path="/proc/sys/net/ipv4/ip_forward" dev="proc" ino=175996 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file
>type=AVC msg=audit(1402611890.888:10080): avc:  denied  { read } for  pid=11138 comm="sysctl" name="ip_forward" dev="proc" ino=175996 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file
>type=AVC msg=audit(1402611890.888:10080): avc:  denied  { open } for  pid=11138 comm="sysctl" path="/proc/sys/net/ipv4/ip_forward" dev="proc" ino=175996 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=file
>type=AVC msg=audit(1402611890.908:10081): avc:  denied  { read } for  pid=11141 comm="sudo" name="passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611890.908:10081): avc:  denied  { open } for  pid=11141 comm="sudo" path="/etc/passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611890.908:10082): avc:  denied  { getattr } for  pid=11141 comm="sudo" path="/etc/passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611890.979:10088): avc:  denied  { getattr } for  pid=29513 comm="nova-network" path="/dev/vhost-net" dev="devtmpfs" ino=12363 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:vhost_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1402611892.747:10105): avc:  denied  { net_raw } for  pid=11159 comm="dnsmasq" capability=13  scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:system_r:nova_network_t:s0 tclass=capability
>type=AVC msg=audit(1402611936.510:10210): avc:  denied  { getattr } for  pid=29513 comm="nova-network" path="/dev/vhost-net" dev="devtmpfs" ino=12363 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:vhost_device_t:s0 tclass=chr_file
>type=AVC msg=audit(1402611936.529:10211): avc:  denied  { read } for  pid=11284 comm="sudo" name="passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611936.529:10211): avc:  denied  { open } for  pid=11284 comm="sudo" path="/etc/passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611936.529:10212): avc:  denied  { getattr } for  pid=11284 comm="sudo" path="/etc/passwd" dev="dm-0" ino=72760027 scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:object_r:passwd_file_t:s0 tclass=file
>type=AVC msg=audit(1402611936.576:10216): avc:  denied  { sys_ptrace } for  pid=11285 comm="nova-rootwrap" capability=19  scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:system_r:nova_network_t:s0 tclass=capability
>type=AVC msg=audit(1402611936.578:10217): avc:  denied  { kill } for  pid=11286 comm="kill" capability=5  scontext=system_u:system_r:nova_network_t:s0 tcontext=system_u:system_r:nova_network_t:s0 tclass=capability

Actions: View

Attachments on bug 1095869: 908326