Attachment 923330 Details for Bug 1102881 – audit.log with all denials logged

audit.log with all denials logged

audit.log (text/plain), 6.47 KB, created by Adam Litke on 2014-08-01 14:50:38 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Adam Litke

Created: 2014-08-01 14:50:38 UTC

Size: 6.47 KB

patch

obsolete

>type=USER_END msg=audit(1406904424.831:429): pid=4525 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=USER_CMD msg=audit(1406904435.204:430): pid=4533 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=73656D6F64756C65202D4442 terminal=pts/0 res=success'
>type=USER_START msg=audit(1406904435.204:431): pid=4533 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=MAC_POLICY_LOAD msg=audit(1406904444.318:432): policy loaded auid=1000 ses=2
>type=SYSCALL msg=audit(1406904444.318:432): arch=c000003e syscall=1 success=yes exit=3485592 a0=4 a1=7f626b7f2000 a2=352f98 a3=7ffffe246760 items=0 ppid=4534 pid=4541 auid=1000 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=pts0 ses=2 comm="load_policy" exe="/usr/sbin/load_policy" subj=unconfined_u:system_r:unconfined_t:s0-s0:c0.c1023 key=(null)
>type=USER_END msg=audit(1406904445.214:433): pid=4533 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'
>type=AVC msg=audit(1406904459.819:434): avc:  denied  { getattr } for  pid=4188 comm="qemu-system-x86" path="/dev/dm-12" dev="devtmpfs" ino=52549 scontext=system_u:system_r:svirt_t:s0:c75,c716 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1406904459.819:434): arch=c000003e syscall=6 success=no exit=-13 a0=7fc1167e0730 a1=7fff53ea7210 a2=7fff53ea7210 a3=6433323436306361 items=0 ppid=1 pid=4188 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c75,c716 key=(null)
>type=AVC msg=audit(1406904459.819:435): avc:  denied  { getattr } for  pid=4188 comm="qemu-system-x86" path="/dev/dm-12" dev="devtmpfs" ino=52549 scontext=system_u:system_r:svirt_t:s0:c75,c716 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file
>type=SYSCALL msg=audit(1406904459.819:435): arch=c000003e syscall=6 success=no exit=-13 a0=7fc1167e0730 a1=7fff53ea7210 a2=7fff53ea7210 a3=6433323436306361 items=0 ppid=1 pid=4188 auid=4294967295 uid=107 gid=107 euid=107 suid=107 fsuid=107 egid=107 sgid=107 fsgid=107 tty=(none) ses=4294967295 comm="qemu-system-x86" exe="/usr/bin/qemu-system-x86_64" subj=system_u:system_r:svirt_t:s0:c75,c716 key=(null)
>type=USER_CMD msg=audit(1406904475.613:436): pid=4569 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D20766773202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035313633376431663234323365346263353962623663613637387C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D20202D2D6E6F68656164696E6773202D2D756E6974732062202D2D6E6F737566666978202D2D736570617261746F72207C202D2D69676E6F7265736B6970706564636C7573746572202D6F20757569642C6E616D652C617474722C73697A652C667265652C657874656E745F73697A652C657874656E745F636F756E742C667265655F636F756E742C746167732C76675F6D64615F73697A652C76675F6D64615F667265652C6C765F636F756E742C70765F636F756E742C70765F6E616D652061653932616661362D363665382D343739652D626334642D626230616330363432336465 terminal=? res=success'
>type=USER_START msg=audit(1406904475.615:437): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1406904475.666:438): pid=4569 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1406904475.680:439): pid=4571 uid=36 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='cwd="/" cmd=2F7573722F7362696E2F6C766D207667636B202D2D636F6E666967202064657669636573207B207072656665727265645F6E616D6573203D205B225E2F6465762F6D61707065722F225D2069676E6F72655F73757370656E6465645F646576696365733D312077726974655F63616368655F73746174653D302064697361626C655F61667465725F6572726F725F636F756E743D33206F627461696E5F6465766963655F6C6973745F66726F6D5F756465763D302066696C746572203D205B2027617C2F6465762F6D61707065722F3336303031343035393662396262393138393039346139386136383931663061347C272C2027727C2E2A7C27205D207D2020676C6F62616C207B20206C6F636B696E675F747970653D3120207072696F7269746973655F77726974655F6C6F636B733D312020776169745F666F725F6C6F636B733D3120207573655F6C766D657461643D30207D20206261636B7570207B202072657461696E5F6D696E203D203530202072657461696E5F64617973203D2030207D202061653932616661362D363665382D343739652D626334642D626230616330363432336465 terminal=? res=success'
>type=USER_START msg=audit(1406904475.680:440): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_END msg=audit(1406904475.712:441): pid=4571 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='op=PAM:session_close acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=? res=success'
>type=USER_CMD msg=audit(1406904525.024:442): pid=4605 uid=1000 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='cwd="/home/alitke" cmd=6370202F7661722F6C6F672F61756469742F61756469742E6C6F67202E terminal=pts/0 res=success'
>type=USER_START msg=audit(1406904525.025:443): pid=4605 uid=0 auid=1000 ses=2 subj=unconfined_u:unconfined_r:unconfined_t:s0-s0:c0.c1023 msg='op=PAM:session_open acct="root" exe="/usr/bin/sudo" hostname=? addr=? terminal=/dev/pts/0 res=success'

Actions: View

Attachments on bug 1102881: 900481 | 900482 | 900483 | 900484 | 900523 | 901471 | 901490 | 922603 | 922604 | 922606 | 922607 | 923330