Attachment 908918 Details for Bug 1109573 – AVCs

AVCs

file_1109573.txt (text/plain), 10.64 KB, created by Ofer Blaut on 2014-06-15 14:31:53 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ofer Blaut

Created: 2014-06-15 14:31:53 UTC

Size: 10.64 KB

patch

obsolete

>Also AVCs from Compute 
>
>[root@puma34 /]# grep avc /var/log/messages 
>Jun 15 14:52:01 puma34 dbus-daemon: dbus[831]: avc:  received policyload notice (seqno=2)
>Jun 15 14:52:01 puma34 dbus[831]: avc:  received policyload notice (seqno=2)
>Jun 15 14:52:09 puma34 kernel: type=1107 audit(1402833129.329:5): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=2)
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.440:6): avc:  denied  { write } for  pid=18797 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-1xtfnzc" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.466:7): avc:  denied  { write } for  pid=18797 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-1xtfnzc" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.503:8): avc:  denied  { write } for  pid=18800 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-13nmxmz" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.529:9): avc:  denied  { write } for  pid=18800 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-13nmxmz" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.565:10): avc:  denied  { write } for  pid=18803 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-12s7vtg" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.591:11): avc:  denied  { write } for  pid=18803 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-12s7vtg" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.403:12): avc:  denied  { write } for  pid=19026 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-2jogre" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.429:13): avc:  denied  { write } for  pid=19026 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-2jogre" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.464:14): avc:  denied  { write } for  pid=19033 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-ax7kpp" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.490:15): avc:  denied  { write } for  pid=19033 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-ax7kpp" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.525:16): avc:  denied  { write } for  pid=19036 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-1vayq1j" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.552:17): avc:  denied  { write } for  pid=19036 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-1vayq1j" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 17:13:11 puma34 dbus-daemon: dbus[831]: avc:  received setenforce notice (enforcing=0)
>Jun 15 17:13:11 puma34 dbus[831]: avc:  received setenforce notice (enforcing=0)
>Jun 15 17:15:28 puma34 kernel: type=1107 audit(1402841728.767:19): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received setenforce notice (enforcing=0)
>Jun 15 17:19:15 puma34 kernel: type=1400 audit(1402841955.932:20): avc:  denied  { write } for  pid=21138 comm="ovs-vsctl" path="/tmp/puppet20140615-20778-uxrveh" dev="sda5" ino=9699343 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>Jun 15 17:19:18 puma34 kernel: type=1400 audit(1402841958.150:21): avc:  denied  { write } for  pid=21250 comm="ovs-vsctl" path="/tmp/puppet20140615-20778-j944rj" dev="sda5" ino=9699343 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>[root@puma34 /]# 
>
>
>
>[root@puma34 /]# audit2why -i /var/log/messages
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.440:6): avc:  denied  { write } for  pid=18797 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-1xtfnzc" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.466:7): avc:  denied  { write } for  pid=18797 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-1xtfnzc" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.503:8): avc:  denied  { write } for  pid=18800 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-13nmxmz" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.529:9): avc:  denied  { write } for  pid=18800 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-13nmxmz" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.565:10): avc:  denied  { write } for  pid=18803 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-12s7vtg" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:37 puma34 kernel: type=1400 audit(1402840417.591:11): avc:  denied  { write } for  pid=18803 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-12s7vtg" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.403:12): avc:  denied  { write } for  pid=19026 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-2jogre" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.429:13): avc:  denied  { write } for  pid=19026 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-2jogre" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.464:14): avc:  denied  { write } for  pid=19033 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-ax7kpp" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.490:15): avc:  denied  { write } for  pid=19033 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-ax7kpp" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.525:16): avc:  denied  { write } for  pid=19036 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-1vayq1j" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 16:53:42 puma34 kernel: type=1400 audit(1402840422.552:17): avc:  denied  { write } for  pid=19036 comm="ovs-vsctl" path="/tmp/puppet20140615-17793-1vayq1j" dev="sda5" ino=9699341 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 17:19:15 puma34 kernel: type=1400 audit(1402841955.932:20): avc:  denied  { write } for  pid=21138 comm="ovs-vsctl" path="/tmp/puppet20140615-20778-uxrveh" dev="sda5" ino=9699343 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Jun 15 17:19:18 puma34 kernel: type=1400 audit(1402841958.150:21): avc:  denied  { write } for  pid=21250 comm="ovs-vsctl" path="/tmp/puppet20140615-20778-j944rj" dev="sda5" ino=9699343 scontext=system_u:system_r:openvswitch_t:s0 tcontext=system_u:object_r:init_tmp_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.

Actions: View

Attachments on bug 1109573: 908917 | 908918