Attachment 910501 Details for Bug 1111343 – AVCs in permissive mode

AVCs in permissive mode

file_1111343.txt (text/plain), 8.90 KB, created by Gustavo Maciel Dias Vieira on 2014-06-19 19:39:29 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Gustavo Maciel Dias Vieira

Created: 2014-06-19 19:39:29 UTC

Size: 8.90 KB

patch

obsolete

>type=USER_AUTH msg=audit(1403200879.923:416): pid=1524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="rootmail" exe="/usr/libexec/dovecot/auth" hostname=189.101.160.233 addr=189.101.160.233 terminal=dovecot res=success'
>type=USER_ACCT msg=audit(1403200879.929:417): pid=1524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="rootmail" exe="/usr/libexec/dovecot/auth" hostname=189.101.160.233 addr=189.101.160.233 terminal=dovecot res=success'
>type=USER_AUTH msg=audit(1403200880.276:418): pid=1524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:authentication acct="gustavo" exe="/usr/libexec/dovecot/auth" hostname=189.101.160.233 addr=189.101.160.233 terminal=dovecot res=success'
>type=USER_ACCT msg=audit(1403200880.282:419): pid=1524 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:dovecot_auth_t:s0 msg='op=PAM:accounting acct="gustavo" exe="/usr/libexec/dovecot/auth" hostname=189.101.160.233 addr=189.101.160.233 terminal=dovecot res=success'
>type=AVC msg=audit(1403200884.695:420): avc:  denied  { execute } for  pid=1533 comm="imap" name="dspam" dev="xvdb2" ino=280784 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:dspam_exec_t:s0 tclass=file
>type=AVC msg=audit(1403200884.695:420): avc:  denied  { read open } for  pid=1533 comm="imap" path="/usr/bin/dspam" dev="xvdb2" ino=280784 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:dspam_exec_t:s0 tclass=file
>type=AVC msg=audit(1403200884.695:420): avc:  denied  { execute_no_trans } for  pid=1533 comm="imap" path="/usr/bin/dspam" dev="xvdb2" ino=280784 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:dspam_exec_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200884.695:420): arch=c000003e syscall=59 success=yes exit=0 a0=7f771f82acd0 a1=7f771f8a0630 a2=7f771f8183c0 a3=7f771d684a10 items=0 ppid=1528 pid=1533 auid=4294967295 uid=1006 gid=1006 euid=1006 suid=1006 fsuid=1006 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200884.701:421): avc:  denied  { append } for  pid=1533 comm="dspam" name="rootmail.lock" dev="xvdc1" ino=402981 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=AVC msg=audit(1403200884.701:421): avc:  denied  { open } for  pid=1533 comm="dspam" path="/var/lib/dspam/data/r/o/rootmail/rootmail.lock" dev="xvdc1" ino=402981 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200884.701:421): arch=c000003e syscall=2 success=yes exit=7 a0=7fff5c5e9100 a1=441 a2=1b6 a3=7fff5c5e7df0 items=0 ppid=1528 pid=1533 auid=4294967295 uid=1006 gid=1006 euid=1006 suid=1006 fsuid=1006 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200884.701:422): avc:  denied  { getattr } for  pid=1533 comm="dspam" path="/var/lib/dspam/data/r/o/rootmail/rootmail.lock" dev="xvdc1" ino=402981 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200884.701:422): arch=c000003e syscall=5 success=yes exit=0 a0=7 a1=7fff5c5e8ed0 a2=7fff5c5e8ed0 a3=7fff5c5e7df0 items=0 ppid=1528 pid=1533 auid=4294967295 uid=1006 gid=1006 euid=1006 suid=1006 fsuid=1006 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200884.702:423): avc:  denied  { lock } for  pid=1533 comm="dspam" path="/var/lib/dspam/data/r/o/rootmail/rootmail.lock" dev="xvdc1" ino=402981 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200884.702:423): arch=c000003e syscall=72 success=yes exit=0 a0=7 a1=7 a2=7fff5c5e90c0 a3=7fff5c5e8e80 items=0 ppid=1528 pid=1533 auid=4294967295 uid=1006 gid=1006 euid=1006 suid=1006 fsuid=1006 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200884.702:424): avc:  denied  { read write } for  pid=1533 comm="dspam" name="rootmail.css" dev="xvdc1" ino=402428 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200884.702:424): arch=c000003e syscall=2 success=yes exit=8 a0=7fff5c5ea140 a1=2 a2=1800d a3=8 items=0 ppid=1528 pid=1533 auid=4294967295 uid=1006 gid=1006 euid=1006 suid=1006 fsuid=1006 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200884.712:425): avc:  denied  { append } for  pid=1533 comm="dspam" name="system.log" dev="xvdb2" ino=43 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:dspam_var_lib_t:s0 tclass=file
>type=AVC msg=audit(1403200884.712:425): avc:  denied  { open } for  pid=1533 comm="dspam" path="/var/lib/dspam/system.log" dev="xvdb2" ino=43 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:dspam_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200884.712:425): arch=c000003e syscall=2 success=yes exit=9 a0=7fff5c5ea210 a1=441 a2=1b6 a3=e items=0 ppid=1528 pid=1533 auid=4294967295 uid=1006 gid=1006 euid=1006 suid=1006 fsuid=1006 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200884.712:426): avc:  denied  { getattr } for  pid=1533 comm="dspam" path="/var/lib/dspam/system.log" dev="xvdb2" ino=43 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:dspam_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200884.712:426): arch=c000003e syscall=5 success=yes exit=0 a0=9 a1=7fff5c5e9970 a2=7fff5c5e9970 a3=e items=0 ppid=1528 pid=1533 auid=4294967295 uid=1006 gid=1006 euid=1006 suid=1006 fsuid=1006 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200884.713:427): avc:  denied  { lock } for  pid=1533 comm="dspam" path="/var/lib/dspam/system.log" dev="xvdb2" ino=43 scontext=system_u:system_r:dovecot_t:s0 tcontext=system_u:object_r:dspam_var_lib_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200884.713:427): arch=c000003e syscall=72 success=yes exit=0 a0=9 a1=7 a2=7fff5c5e9b60 a3=8 items=0 ppid=1528 pid=1533 auid=4294967295 uid=1006 gid=1006 euid=1006 suid=1006 fsuid=1006 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200910.461:428): avc:  denied  { append } for  pid=1535 comm="dspam" name="gustavo.lock" dev="xvdc1" ino=392676 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=AVC msg=audit(1403200910.461:428): avc:  denied  { open } for  pid=1535 comm="dspam" path="/var/lib/dspam/data/g/u/gustavo/gustavo.lock" dev="xvdc1" ino=392676 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200910.461:428): arch=c000003e syscall=2 success=yes exit=7 a0=7fff3418bd20 a1=441 a2=1b6 a3=7fff3418aa10 items=0 ppid=1532 pid=1535 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200910.462:429): avc:  denied  { getattr } for  pid=1535 comm="dspam" path="/var/lib/dspam/data/g/u/gustavo/gustavo.lock" dev="xvdc1" ino=392676 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200910.462:429): arch=c000003e syscall=5 success=yes exit=0 a0=7 a1=7fff3418baf0 a2=7fff3418baf0 a3=7fff3418aa10 items=0 ppid=1532 pid=1535 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>type=AVC msg=audit(1403200910.462:430): avc:  denied  { lock } for  pid=1535 comm="dspam" path="/var/lib/dspam/data/g/u/gustavo/gustavo.lock" dev="xvdc1" ino=392676 scontext=system_u:system_r:dovecot_t:s0 tcontext=unconfined_u:object_r:httpd_dspam_rw_content_t:s0 tclass=file
>type=SYSCALL msg=audit(1403200910.462:430): arch=c000003e syscall=72 success=yes exit=0 a0=7 a1=7 a2=7fff3418bce0 a3=7fff3418baa0 items=0 ppid=1532 pid=1535 auid=4294967295 uid=1001 gid=1001 euid=1001 suid=1001 fsuid=1001 egid=12 sgid=12 fsgid=12 tty=(none) ses=4294967295 comm="dspam" exe="/usr/bin/dspam" subj=system_u:system_r:dovecot_t:s0 key=(null)
>

Actions: View

Attachments on bug 1111343: 910501 | 910502