Attachment 913935 Details for Bug 1114254 – audit2why

audit2why

file_1114254.txt (text/plain), 10.93 KB, created by Ofer Blaut on 2014-07-01 21:39:45 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ofer Blaut

Created: 2014-07-01 21:39:45 UTC

Size: 10.93 KB

patch

obsolete

>audit2why -i /var/log/audit/audit.log 
>type=AVC msg=audit(1404250472.427:12258): avc:  denied  { read } for  pid=2905 comm="haproxy" name="conf" dev="sda5" ino=20316189 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.427:12258): avc:  denied  { open } for  pid=2905 comm="haproxy" path="/var/lib/neutron/lbaas/98193a60-84d7-478e-90ee-cf34e48986bb/conf" dev="sda5" ino=20316189 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.427:12259): avc:  denied  { getattr } for  pid=2905 comm="haproxy" path="/var/lib/neutron/lbaas/98193a60-84d7-478e-90ee-cf34e48986bb/conf" dev="sda5" ino=20316189 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12260): avc:  denied  { write } for  pid=2905 comm="haproxy" name="98193a60-84d7-478e-90ee-cf34e48986bb" dev="sda5" ino=20316185 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=dir
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12260): avc:  denied  { add_name } for  pid=2905 comm="haproxy" name="sock" dev="sda5" ino=20316187 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=dir
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12260): avc:  denied  { link } for  pid=2905 comm="haproxy" name="sock" dev="sda5" ino=20316187 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12261): avc:  denied  { create } for  pid=2905 comm="haproxy" name="sock.2905.tmp" scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12262): avc:  denied  { setattr } for  pid=2905 comm="haproxy" name="sock.2905.tmp" dev="sda5" ino=20316186 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12263): avc:  denied  { remove_name } for  pid=2905 comm="haproxy" name="sock.2905.tmp" dev="sda5" ino=20316186 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=dir
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12263): avc:  denied  { rename } for  pid=2905 comm="haproxy" name="sock.2905.tmp" dev="sda5" ino=20316186 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12263): avc:  denied  { unlink } for  pid=2905 comm="haproxy" name="sock" dev="sda5" ino=20316187 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12264): avc:  denied  { unlink } for  pid=2905 comm="haproxy" name="pid" dev="sda5" ino=20316188 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12265): avc:  denied  { create } for  pid=2905 comm="haproxy" name="pid" scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12265): avc:  denied  { write } for  pid=2905 comm="haproxy" path="/var/lib/neutron/lbaas/98193a60-84d7-478e-90ee-cf34e48986bb/pid" dev="sda5" ino=20316188 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>[root@puma04 ~(keystone_admin)]#  audit2why -i /var/log/audit/audit.log 
>type=AVC msg=audit(1404250472.427:12258): avc:  denied  { read } for  pid=2905 comm="haproxy" name="conf" dev="sda5" ino=20316189 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.427:12258): avc:  denied  { open } for  pid=2905 comm="haproxy" path="/var/lib/neutron/lbaas/98193a60-84d7-478e-90ee-cf34e48986bb/conf" dev="sda5" ino=20316189 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.427:12259): avc:  denied  { getattr } for  pid=2905 comm="haproxy" path="/var/lib/neutron/lbaas/98193a60-84d7-478e-90ee-cf34e48986bb/conf" dev="sda5" ino=20316189 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12260): avc:  denied  { write } for  pid=2905 comm="haproxy" name="98193a60-84d7-478e-90ee-cf34e48986bb" dev="sda5" ino=20316185 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=dir
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12260): avc:  denied  { add_name } for  pid=2905 comm="haproxy" name="sock" dev="sda5" ino=20316187 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=dir
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12260): avc:  denied  { link } for  pid=2905 comm="haproxy" name="sock" dev="sda5" ino=20316187 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12261): avc:  denied  { create } for  pid=2905 comm="haproxy" name="sock.2905.tmp" scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12262): avc:  denied  { setattr } for  pid=2905 comm="haproxy" name="sock.2905.tmp" dev="sda5" ino=20316186 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12263): avc:  denied  { remove_name } for  pid=2905 comm="haproxy" name="sock.2905.tmp" dev="sda5" ino=20316186 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=dir
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12263): avc:  denied  { rename } for  pid=2905 comm="haproxy" name="sock.2905.tmp" dev="sda5" ino=20316186 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12263): avc:  denied  { unlink } for  pid=2905 comm="haproxy" name="sock" dev="sda5" ino=20316187 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=sock_file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12264): avc:  denied  { unlink } for  pid=2905 comm="haproxy" name="pid" dev="sda5" ino=20316188 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12265): avc:  denied  { create } for  pid=2905 comm="haproxy" name="pid" scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>type=AVC msg=audit(1404250472.428:12265): avc:  denied  { write } for  pid=2905 comm="haproxy" path="/var/lib/neutron/lbaas/98193a60-84d7-478e-90ee-cf34e48986bb/pid" dev="sda5" ino=20316188 scontext=system_u:system_r:haproxy_t:s0 tcontext=system_u:object_r:neutron_var_lib_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>

Actions: View

Attachments on bug 1114254: 913500 | 913934 | 913935