Attachment 918272 Details for Bug 1118859 – audit.log with 'semanage dontaudit off'

audit.log with 'semanage dontaudit off'

selinux.txt (text/plain), 1.66 KB, created by Ryan O'Hara on 2014-07-15 23:13:14 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ryan O'Hara

Created: 2014-07-15 23:13:14 UTC

Size: 1.66 KB

patch

obsolete

># rpm -q openstack-selinux
>openstack-selinux-0.5.14-1.el7ost.noarch
>
># getenforce 
>Permissive
>
># ausearch -m avc
>----
>time->Tue Jul 15 18:06:21 2014
>type=SYSCALL msg=audit(1405465581.745:1384): arch=c000003e syscall=59 success=yes exit=0 a0=7fff32b42d93 a1=7fff32b42290 a2=7fff32b42300 a3=7fff32b41ef0 items=0 ppid=23767 pid=24557 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) ses=4294967295 comm="mysqld" exe="/usr/libexec/mysqld" subj=system_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1405465581.745:1384): avc:  denied  { noatsecure } for  pid=24557 comm="mysqld" scontext=system_u:system_r:mysqld_safe_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=process
>type=AVC msg=audit(1405465581.745:1384): avc:  denied  { siginh } for  pid=24557 comm="mysqld" scontext=system_u:system_r:mysqld_safe_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=process
>type=AVC msg=audit(1405465581.745:1384): avc:  denied  { rlimitinh } for  pid=24557 comm="mysqld" scontext=system_u:system_r:mysqld_safe_t:s0 tcontext=system_u:system_r:mysqld_t:s0 tclass=process
>----
>time->Tue Jul 15 18:06:26 2014
>type=SYSCALL msg=audit(1405465586.859:1385): arch=c000003e syscall=49 success=yes exit=0 a0=b a1=7fc75874e5d0 a2=10 a3=7fffc39ad3f4 items=0 ppid=24674 pid=24699 auid=4294967295 uid=27 gid=27 euid=27 suid=27 fsuid=27 egid=27 sgid=27 fsgid=27 tty=(none) ses=4294967295 comm="rsync" exe="/usr/bin/rsync" subj=system_u:system_r:mysqld_t:s0 key=(null)
>type=AVC msg=audit(1405465586.859:1385): avc:  denied  { name_bind } for  pid=24699 comm="rsync" src=4444 scontext=system_u:system_r:mysqld_t:s0 tcontext=system_u:object_r:kerberos_port_t:s0 tclass=tcp_socket

Actions: View

Attachments on bug 1118859: 917411 | 918272