Attachment 940746 Details for Bug 1117673 – AVC log messages after a successful pkispawn

AVC log messages after a successful pkispawn

avclog (text/plain), 3.26 KB, created by Roshni on 2014-09-24 11:34:45 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Roshni

Created: 2014-09-24 11:34:45 UTC

Size: 3.26 KB

patch

obsolete

>Info: Searching AVC errors produced since 1411512394.79 (Tue Sep 23 18:46:34 2014)
>Searching logs...
>Running '/usr/bin/env LC_ALL=en_US.UTF-8 /sbin/ausearch -m AVC -m USER_AVC -m SELINUX_ERR -ts 09/23/2014 18:46:34 < /dev/null >/mnt/testarea/tmp.rhts-db-submit-result.LnsBa6 2>&1'
>----
>time->Tue Sep 23 18:48:20 2014
>type=USER_AVC msg=audit(1411512500.815:66): pid=1 uid=0 auid=4294967295 ses=4294967295 subj=system_u:system_r:init_t:s0 msg='avc:  received policyload notice (seqno=2)  exe="/usr/lib/systemd/systemd" sauid=0 hostname=? addr=? terminal=?'
>----
>time->Tue Sep 23 18:49:13 2014
>type=PROCTITLE msg=audit(1411512553.464:70): proctitle=6370002D61002F7661722F6C69622F706B692F706B692D6D61737465722F636F6E662F63612F43532E636667002F7661722F6C69622F706B692F706B692D6D61737465722F636F6E662F63612F61726368697665732F43532E6366672E62616B2E3230313430393233313834393133
>type=SYSCALL msg=audit(1411512553.464:70): arch=c000003e syscall=1 success=no exit=-13 a0=3 a1=b17b30 a2=2d a3=7fff3f6564e0 items=0 ppid=12978 pid=13174 auid=4294967295 uid=17 gid=17 euid=17 suid=17 fsuid=17 egid=17 sgid=17 fsgid=17 tty=(none) ses=4294967295 comm="cp" exe="/usr/bin/cp" subj=system_u:system_r:pki_tomcat_t:s0 key=(null)
>type=AVC msg=audit(1411512553.464:70): avc:  denied  { setfscreate } for  pid=13174 comm="cp" scontext=system_u:system_r:pki_tomcat_t:s0 tcontext=system_u:system_r:pki_tomcat_t:s0 tclass=process permissive=0
>----
>time->Tue Sep 23 18:49:13 2014
>type=PROCTITLE msg=audit(1411512553.464:71): proctitle=6370002D61002F7661722F6C69622F706B692F706B692D6D61737465722F636F6E662F63612F43532E636667002F7661722F6C69622F706B692F706B692D6D61737465722F636F6E662F63612F61726368697665732F43532E6366672E62616B2E3230313430393233313834393133
>type=SYSCALL msg=audit(1411512553.464:71): arch=c000003e syscall=190 success=no exit=-13 a0=4 a1=7fff3f656680 a2=b178f0 a3=2d items=0 ppid=12978 pid=13174 auid=4294967295 uid=17 gid=17 euid=17 suid=17 fsuid=17 egid=17 sgid=17 fsgid=17 tty=(none) ses=4294967295 comm="cp" exe="/usr/bin/cp" subj=system_u:system_r:pki_tomcat_t:s0 key=(null)
>type=AVC msg=audit(1411512553.464:71): avc:  denied  { relabelfrom } for  pid=13174 comm="cp" name="CS.cfg.bak.20140923184913" dev="dm-1" ino=2889321 scontext=system_u:system_r:pki_tomcat_t:s0 tcontext=system_u:object_r:pki_tomcat_etc_rw_t:s0 tclass=file permissive=0
>Fail: AVC messages found.
>Checking for errors...
>Using stronger AVC checks.
>	Define empty RHTS_OPTION_STRONGER_AVC parameter if this causes any problems.
>Running 'cat /mnt/testarea/tmp.rhts-db-submit-result.LnsBa6 | /sbin/ausearch -m AVC -m SELINUX_ERR'
>Fail: AVC messages found.
>Running 'cat %s | /sbin/ausearch -m USER_AVC >/mnt/testarea/tmp.rhts-db-submit-result.S8wEM7 2>&1'
>Info: No AVC messages found.
>/bin/grep 'avc: ' /mnt/testarea/dmesg.log | /bin/grep --invert-match TESTOUT.log
>No AVC messages found in dmesg
>Running '/usr/sbin/sestatus'
>SELinux status:                 enabled
>SELinuxfs mount:                /sys/fs/selinux
>SELinux root directory:         /etc/selinux
>Loaded policy name:             targeted
>Current mode:                   enforcing
>Mode from config file:          enforcing
>Policy MLS status:              enabled
>Policy deny_unknown status:     allowed
>Max kernel policy version:      29
>Running 'rpm -q selinux-policy || true'
>selinux-policy-3.12.1-183.fc20.noarch
>

Actions: View

Attachments on bug 1117673: 916661 | 934441 | 940746 | 940749