| Summary: | AVC denied for apcupsd_t usb_device_t:chr_file { read write ioctl open } | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 6 | Reporter: | Robert Scheck <redhat-bugzilla> |
| Component: | selinux-policy | Assignee: | Miroslav Grepl <mgrepl> |
| Status: | CLOSED DUPLICATE | QA Contact: | BaseOS QE Security Team <qe-baseos-security> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | unspecified | ||
| Version: | 6.1 | CC: | dwalsh, mmalik, robert.scheck |
| Target Milestone: | rc | ||
| Target Release: | --- | ||
| Hardware: | Unspecified | ||
| OS: | Unspecified | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | Bug Fix | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2011-11-23 08:42:12 UTC | Type: | --- |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
I have cross-filed case 00566340 and 00566341 (two different customers) in the customer portal of the Red Hat Network. selinux-policy-targeted-3.7.19-126.el6.noarch needs to be used which is the latest policy for RHEL6.2. *** This bug has been marked as a duplicate of bug 752453 *** Where in the Red Hat Network is exactly this policy available? I only see the 6.1 related ones. And dwalsh's repo contains 3.7.19-130.el6. Robert I pushed the 126 packages to people also. |
Description of problem: type=AVC msg=audit(1321887462.695:5): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887462.695:5): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887463.697:6): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887463.697:6): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887464.696:7): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887464.696:7): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887465.698:8): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887465.698:8): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887466.698:9): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887466.698:9): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887467.698:10): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887467.698:10): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887468.699:11): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887468.699:11): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887469.699:12): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887469.699:12): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887470.700:13): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887470.700:13): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321887471.700:14): avc: denied { read write } for pid=1985 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6036 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321887471.700:14): arch=c000003e syscall=2 success=no exit=-13 a0=7fffe7918750 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=1985 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888224.238:4): avc: denied { read write } for pid=2210 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=AVC msg=audit(1321888224.238:4): avc: denied { open } for pid=2210 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888224.238:4): arch=c000003e syscall=2 success=yes exit=4 a0=7fff13c57bf0 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888224.238:5): avc: denied { ioctl } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888224.238:5): arch=c000003e syscall=16 success=yes exit=8650756 a0=4 a1=4802 a2=0 a3=fffffff1 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888226.437:6): avc: denied { read write } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888226.437:6): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c00c4809 a2=7fff13c57bc0 a3=10 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888226.788:7): avc: denied { write } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888226.788:7): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff13c57b60 a3=c items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888226.811:8): avc: denied { read } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888226.811:8): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=1f4a8d4 a3=c items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888227.017:9): avc: denied { write } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888227.017:9): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff13c57b60 a3=c items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888227.119:10): avc: denied { read write } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888227.119:10): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=1f4abf4 a3=c items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888227.254:11): avc: denied { read write } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888227.254:11): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=1f4aba4 a3=c items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888227.394:12): avc: denied { write } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888227.394:12): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff13c57b60 a3=c items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888227.398:13): avc: denied { read } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888227.398:13): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=1f4ac94 a3=c items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888286.624:14): avc: denied { write } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888286.624:14): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff13c57b50 a3=0 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888286.717:15): avc: denied { read } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888286.717:15): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=1f4b194 a3=0 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888599.512:35): avc: denied { write } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888599.512:35): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff13c57b50 a3=0 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888599.596:36): avc: denied { read } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888599.596:36): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=1f4b194 a3=0 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=SYSCALL msg=audit(1321888812.727:937): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff13c57b50 a3=0 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888812.811:938): avc: denied { read } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888812.811:938): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=1f4b194 a3=0 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=SYSCALL msg=audit(1321888848.990:943): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff13c57b50 a3=0 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321888849.073:944): avc: denied { read } for pid=2210 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6039 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321888849.073:944): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=1f4b194 a3=0 items=0 ppid=1 pid=2210 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321889178.828:4): avc: denied { read write } for pid=2207 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=AVC msg=audit(1321889178.828:4): avc: denied { open } for pid=2207 comm="apcupsd" name="hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321889178.828:4): arch=c000003e syscall=2 success=yes exit=4 a0=7fff6dcfdf60 a1=102 a2=c8 a3=fffffff1 items=0 ppid=1 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321889178.828:5): avc: denied { ioctl } for pid=2207 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321889178.828:5): arch=c000003e syscall=16 success=yes exit=8650756 a0=4 a1=4802 a2=0 a3=fffffff1 items=0 ppid=1 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321889181.619:6): avc: denied { read write } for pid=2207 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321889181.619:6): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c00c4809 a2=7fff6dcfdf30 a3=10 items=0 ppid=1 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321889181.815:7): avc: denied { write } for pid=2207 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321889181.815:7): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff6dcfded0 a3=c items=0 ppid=1 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321889181.844:8): avc: denied { read } for pid=2207 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321889181.844:8): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=2287d84 a3=c items=0 ppid=1 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321889182.414:9): avc: denied { read write } for pid=2207 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321889182.414:9): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=2287bf4 a3=c items=0 ppid=1 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321889239.619:17): avc: denied { write } for pid=2207 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321889239.619:17): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=400c4807 a2=7fff6dcfdec0 a3=0 items=0 ppid=1 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) type=AVC msg=audit(1321889239.708:18): avc: denied { read } for pid=2207 comm="apcupsd" path="/dev/usb/hiddev0" dev=devtmpfs ino=6043 scontext=system_u:system_r:apcupsd_t:s0 tcontext=system_u:object_r:usb_device_t:s0 tclass=chr_file type=SYSCALL msg=audit(1321889239.708:18): arch=c000003e syscall=16 success=yes exit=0 a0=4 a1=c018480b a2=2288194 a3=0 items=0 ppid=1 pid=2207 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="apcupsd" exe="/sbin/apcupsd" subj=system_u:system_r:apcupsd_t:s0 key=(null) Finally: cat /var/log/audit/audit.log | audit2allow -> allow apcupsd_t usb_device_t:chr_file { read write ioctl open }; Version-Release number of selected component (if applicable): apcupsd-3.14.8-2.el6.x86_64 selinux-policy-targeted-3.7.19-125.el6.noarch How reproducible: Everytime. Actual results: AVC denied for apcupsd_t usb_device_t:chr_file { read write ioctl open } Expected results: No AVC denied for apcupsd_t usb_device_t:chr_file { read write ioctl open }