Attachment 945427 Details for Bug 1151030 – AVCs caught in enforcing mode

AVCs caught in enforcing mode

enforcing-AVCs.txt (text/plain), 13.28 KB, created by Milos Malik on 2014-10-09 19:14:30 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Milos Malik

Created: 2014-10-09 19:14:30 UTC

Size: 13.28 KB

patch

obsolete

>----
>type=USER_AVC msg=audit(10/09/2014 20:50:32.253:237) : pid=592 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Properties member=GetAll dest=org.freedesktop.NetworkManager spid=31966 tpid=583 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus  exe=/usr/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(10/09/2014 20:50:32.285:239) : pid=592 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Properties member=GetAll dest=org.freedesktop.NetworkManager spid=31969 tpid=583 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus  exe=/usr/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:32.223:236) : arch=x86_64 syscall=connect success=no exit=-13(Permission denied) a0=0x4 a1=0x7ffffe36a150 a2=0x21 a3=0x7ffffe369ec0 items=0 ppid=31965 pid=31966 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=nmcli exe=/usr/bin/nmcli subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:32.223:236) : avc:  denied  { write } for  pid=31966 comm=nmcli name=private dev="tmpfs" ino=118850 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=sock_file 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:32.262:238) : arch=x86_64 syscall=connect success=no exit=-13(Permission denied) a0=0x4 a1=0x7fff45a78060 a2=0x21 a3=0x7fff45a77dd0 items=0 ppid=31968 pid=31969 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=nmcli exe=/usr/bin/nmcli subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:32.262:238) : avc:  denied  { write } for  pid=31969 comm=nmcli name=private dev="tmpfs" ino=118850 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=sock_file 
>----
>type=USER_AVC msg=audit(10/09/2014 20:50:38.040:241) : pid=592 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Properties member=GetAll dest=org.freedesktop.NetworkManager spid=32509 tpid=583 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus  exe=/usr/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(10/09/2014 20:50:38.097:243) : pid=592 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Properties member=GetAll dest=org.freedesktop.NetworkManager spid=32512 tpid=583 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus  exe=/usr/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(10/09/2014 20:50:38.134:245) : pid=592 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Properties member=GetAll dest=org.freedesktop.NetworkManager spid=32516 tpid=583 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus  exe=/usr/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(10/09/2014 20:50:38.170:247) : pid=592 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Properties member=GetAll dest=org.freedesktop.NetworkManager spid=32519 tpid=583 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus  exe=/usr/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
>----
>type=USER_AVC msg=audit(10/09/2014 20:50:38.204:249) : pid=592 uid=dbus auid=unset ses=unset subj=system_u:system_r:system_dbusd_t:s0-s0:c0.c1023 msg='avc:  denied  { send_msg } for msgtype=method_call interface=org.freedesktop.DBus.Properties member=GetAll dest=org.freedesktop.NetworkManager spid=32522 tpid=583 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:system_r:NetworkManager_t:s0 tclass=dbus  exe=/usr/bin/dbus-daemon sauid=dbus hostname=? addr=? terminal=?' 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:38.049:242) : arch=x86_64 syscall=connect success=no exit=-13(Permission denied) a0=0x4 a1=0x7fff316fdc40 a2=0x21 a3=0x7fff316fd9b0 items=0 ppid=32511 pid=32512 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=nmcli exe=/usr/bin/nmcli subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:38.049:242) : avc:  denied  { write } for  pid=32512 comm=nmcli name=private dev="tmpfs" ino=118850 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=sock_file 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:38.108:244) : arch=x86_64 syscall=connect success=no exit=-13(Permission denied) a0=0x4 a1=0x7fffe08c6750 a2=0x21 a3=0x7fffe08c64c0 items=0 ppid=32515 pid=32516 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=nmcli exe=/usr/bin/nmcli subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:38.108:244) : avc:  denied  { write } for  pid=32516 comm=nmcli name=private dev="tmpfs" ino=118850 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=sock_file 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:38.144:246) : arch=x86_64 syscall=connect success=no exit=-13(Permission denied) a0=0x4 a1=0x7fffb98c16d0 a2=0x21 a3=0x7fffb98c1440 items=0 ppid=32518 pid=32519 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=nmcli exe=/usr/bin/nmcli subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:38.144:246) : avc:  denied  { write } for  pid=32519 comm=nmcli name=private dev="tmpfs" ino=118850 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=sock_file 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:38.011:240) : arch=x86_64 syscall=connect success=no exit=-13(Permission denied) a0=0x4 a1=0x7fff3b6de960 a2=0x21 a3=0x7fff3b6de6d0 items=0 ppid=32508 pid=32509 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=nmcli exe=/usr/bin/nmcli subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:38.011:240) : avc:  denied  { write } for  pid=32509 comm=nmcli name=private dev="tmpfs" ino=118850 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=sock_file 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:38.179:248) : arch=x86_64 syscall=connect success=no exit=-13(Permission denied) a0=0x4 a1=0x7fff4df6dd00 a2=0x21 a3=0x7fff4df6da70 items=0 ppid=32521 pid=32522 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=nmcli exe=/usr/bin/nmcli subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:38.179:248) : avc:  denied  { write } for  pid=32522 comm=nmcli name=private dev="tmpfs" ino=118850 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:NetworkManager_var_run_t:s0 tclass=sock_file 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:38.354:250) : arch=x86_64 syscall=open success=no exit=-13(Permission denied) a0=0x7f91f2d28902 a1=O_RDONLY|O_CREAT a2=0600 a3=0x7fffcc94f430 items=0 ppid=32544 pid=32545 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=exportfs exe=/usr/sbin/exportfs subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:38.354:250) : avc:  denied  { write } for  pid=32545 comm=exportfs name=nfs dev="dm-1" ino=67368638 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:var_lib_nfs_t:s0 tclass=dir 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:39.178:251) : arch=x86_64 syscall=access success=no exit=-13(Permission denied) a0=0x7f1b0097ec90 a1=X_OK|W_OK|R_OK a2=0x7f1aff7a4040 a3=0x8 items=0 ppid=32575 pid=32576 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=semodule exe=/usr/sbin/semodule subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:39.178:251) : avc:  denied  { write } for  pid=32576 comm=semodule name=modules dev="dm-1" ino=135686689 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_store_t:s0 tclass=dir 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:39.178:252) : arch=x86_64 syscall=access success=no exit=-13(Permission denied) a0=0x7f1b0097ec90 a1=X_OK|W_OK|R_OK a2=0x7f1aff7a4040 a3=0x8 items=0 ppid=32575 pid=32576 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=semodule exe=/usr/sbin/semodule subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:39.178:252) : avc:  denied  { write } for  pid=32576 comm=semodule name=modules dev="dm-1" ino=135686689 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_store_t:s0 tclass=dir 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:39.179:253) : arch=x86_64 syscall=access success=no exit=-13(Permission denied) a0=0x7f1b0097ec90 a1=X_OK|W_OK|R_OK a2=0x7f1aff7a4040 a3=0x8 items=0 ppid=32575 pid=32576 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=semodule exe=/usr/sbin/semodule subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:39.179:253) : avc:  denied  { write } for  pid=32576 comm=semodule name=modules dev="dm-1" ino=135686689 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_store_t:s0 tclass=dir 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:42.015:255) : arch=x86_64 syscall=access success=no exit=-13(Permission denied) a0=0x2de9920 a1=X_OK|W_OK|R_OK a2=0x7fbfd1421040 a3=0x8 items=0 ppid=32583 pid=32584 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=semanage exe=/usr/bin/python2.7 subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:42.015:255) : avc:  denied  { write } for  pid=32584 comm=semanage name=modules dev="dm-1" ino=135686689 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_store_t:s0 tclass=dir 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:42.016:256) : arch=x86_64 syscall=access success=no exit=-13(Permission denied) a0=0x2de9920 a1=X_OK|W_OK|R_OK a2=0x7fbfd1421040 a3=0x8 items=0 ppid=32583 pid=32584 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=semanage exe=/usr/bin/python2.7 subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:42.016:256) : avc:  denied  { write } for  pid=32584 comm=semanage name=modules dev="dm-1" ino=135686689 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_store_t:s0 tclass=dir 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:42.072:257) : arch=x86_64 syscall=socket success=no exit=-13(Permission denied) a0=netlink a1=SOCK_RAW a2=igp a3=0x0 items=0 ppid=32583 pid=32584 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=semanage exe=/usr/bin/python2.7 subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:42.072:257) : avc:  denied  { create } for  pid=32584 comm=semanage scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tclass=netlink_audit_socket 
>----
>type=SYSCALL msg=audit(10/09/2014 20:50:42.015:254) : arch=x86_64 syscall=access success=no exit=-13(Permission denied) a0=0x2de9920 a1=X_OK|W_OK|R_OK a2=0x7fbfd1421040 a3=0x8 items=0 ppid=32583 pid=32584 auid=unset uid=root gid=root euid=root suid=root fsuid=root egid=root sgid=root fsgid=root tty=(none) ses=unset comm=semanage exe=/usr/bin/python2.7 subj=system_u:system_r:sosreport_t:s0-s0:c0.c1023 key=(null) 
>type=AVC msg=audit(10/09/2014 20:50:42.015:254) : avc:  denied  { write } for  pid=32584 comm=semanage name=modules dev="dm-1" ino=135686689 scontext=system_u:system_r:sosreport_t:s0-s0:c0.c1023 tcontext=system_u:object_r:semanage_store_t:s0 tclass=dir 
>----

Actions: View

Attachments on bug 1151030: 945427 | 945428 | 945457