Attachment 950780 Details for Bug 1157232 – avc log

avc log

file_1157232.txt (text/plain), 14.56 KB, created by Ofer Blaut on 2014-10-26 11:57:47 UTC

(hide)

Description:

Filename:

MIME Type:

Creator: Ofer Blaut

Created: 2014-10-26 11:57:47 UTC

Size: 14.56 KB

patch

obsolete

>[root@staypuft ~]# grep -ir avc /var/log/*
>/var/log/messages:Oct 26 08:29:37 puma33 dbus: avc:  received policyload notice (seqno=2)
>/var/log/messages:Oct 26 08:30:08 puma33 dbus: avc:  received policyload notice (seqno=3)
>/var/log/messages:Oct 26 08:30:10 puma33 dbus: avc:  received policyload notice (seqno=4)
>/var/log/messages:Oct 26 11:12:45 puma33 kernel: type=1400 audit(1414314765.492:7): avc:  denied  { getattr } for  pid=10217 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 11:12:45 puma33 kernel: type=1400 audit(1414314765.492:8): avc:  denied  { execute } for  pid=10217 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 11:12:45 puma33 kernel: type=1400 audit(1414314765.495:9): avc:  denied  { read open } for  pid=11178 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 11:12:45 puma33 kernel: type=1400 audit(1414314765.495:10): avc:  denied  { execute_no_trans } for  pid=11178 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 11:51:07 puma33 kernel: type=1400 audit(1414317067.148:11): avc:  denied  { getattr } for  pid=15397 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 11:51:07 puma33 kernel: type=1400 audit(1414317067.148:12): avc:  denied  { execute } for  pid=15397 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 11:51:07 puma33 kernel: type=1400 audit(1414317067.151:13): avc:  denied  { read open } for  pid=16920 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 11:51:07 puma33 kernel: type=1400 audit(1414317067.151:14): avc:  denied  { execute_no_trans } for  pid=16920 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 12:21:04 puma33 kernel: type=1400 audit(1414318864.732:15): avc:  denied  { getattr } for  pid=19545 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 12:21:04 puma33 kernel: type=1400 audit(1414318864.732:16): avc:  denied  { execute } for  pid=19545 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 12:21:04 puma33 kernel: type=1400 audit(1414318864.735:17): avc:  denied  { read open } for  pid=20343 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 12:21:04 puma33 kernel: type=1400 audit(1414318864.736:18): avc:  denied  { execute_no_trans } for  pid=20343 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 13:21:13 puma33 kernel: type=1400 audit(1414322473.990:19): avc:  denied  { getattr } for  pid=28416 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 13:21:13 puma33 kernel: type=1400 audit(1414322473.990:20): avc:  denied  { execute } for  pid=28416 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 13:21:13 puma33 kernel: type=1400 audit(1414322473.993:21): avc:  denied  { read open } for  pid=29751 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 13:21:13 puma33 kernel: type=1400 audit(1414322473.993:22): avc:  denied  { execute_no_trans } for  pid=29751 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 13:51:14 puma33 kernel: type=1400 audit(1414324274.638:23): avc:  denied  { getattr } for  pid=379 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 13:51:14 puma33 kernel: type=1400 audit(1414324274.638:24): avc:  denied  { execute } for  pid=379 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 13:51:14 puma33 kernel: type=1400 audit(1414324274.641:25): avc:  denied  { read open } for  pid=1143 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/messages:Oct 26 13:51:14 puma33 kernel: type=1400 audit(1414324274.641:26): avc:  denied  { execute_no_trans } for  pid=1143 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>/var/log/prelink/prelink.log:Prelinking /usr/sbin/avcstat
>
>
>
>[root@staypuft ~]# audit2why  -i /var/log/messages 
>Oct 26 11:12:45 puma33 kernel: type=1400 audit(1414314765.492:7): avc:  denied  { getattr } for  pid=10217 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 11:12:45 puma33 kernel: type=1400 audit(1414314765.492:8): avc:  denied  { execute } for  pid=10217 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 11:12:45 puma33 kernel: type=1400 audit(1414314765.495:9): avc:  denied  { read open } for  pid=11178 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 11:12:45 puma33 kernel: type=1400 audit(1414314765.495:10): avc:  denied  { execute_no_trans } for  pid=11178 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 11:51:07 puma33 kernel: type=1400 audit(1414317067.148:11): avc:  denied  { getattr } for  pid=15397 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 11:51:07 puma33 kernel: type=1400 audit(1414317067.148:12): avc:  denied  { execute } for  pid=15397 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 11:51:07 puma33 kernel: type=1400 audit(1414317067.151:13): avc:  denied  { read open } for  pid=16920 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 11:51:07 puma33 kernel: type=1400 audit(1414317067.151:14): avc:  denied  { execute_no_trans } for  pid=16920 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 12:21:04 puma33 kernel: type=1400 audit(1414318864.732:15): avc:  denied  { getattr } for  pid=19545 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 12:21:04 puma33 kernel: type=1400 audit(1414318864.732:16): avc:  denied  { execute } for  pid=19545 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 12:21:04 puma33 kernel: type=1400 audit(1414318864.735:17): avc:  denied  { read open } for  pid=20343 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 12:21:04 puma33 kernel: type=1400 audit(1414318864.736:18): avc:  denied  { execute_no_trans } for  pid=20343 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 13:21:13 puma33 kernel: type=1400 audit(1414322473.990:19): avc:  denied  { getattr } for  pid=28416 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 13:21:13 puma33 kernel: type=1400 audit(1414322473.990:20): avc:  denied  { execute } for  pid=28416 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 13:21:13 puma33 kernel: type=1400 audit(1414322473.993:21): avc:  denied  { read open } for  pid=29751 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 13:21:13 puma33 kernel: type=1400 audit(1414322473.993:22): avc:  denied  { execute_no_trans } for  pid=29751 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 13:51:14 puma33 kernel: type=1400 audit(1414324274.638:23): avc:  denied  { getattr } for  pid=379 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 13:51:14 puma33 kernel: type=1400 audit(1414324274.638:24): avc:  denied  { execute } for  pid=379 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 13:51:14 puma33 kernel: type=1400 audit(1414324274.641:25): avc:  denied  { read open } for  pid=1143 comm="ruby" name="iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>
>Oct 26 13:51:14 puma33 kernel: type=1400 audit(1414324274.641:26): avc:  denied  { execute_no_trans } for  pid=1143 comm="ruby" path="/sbin/iptables-multi-1.4.7" dev=dm-0 ino=3014821 scontext=unconfined_u:system_r:passenger_t:s0 tcontext=system_u:object_r:iptables_exec_t:s0 tclass=file
>
>	Was caused by:
>		Missing type enforcement (TE) allow rule.
>
>		You can use audit2allow to generate a loadable module to allow this access.
>

Actions: View

Attachments on bug 1157232: 950780