AVCs for resolvconf

resolvconf_avcs.log (text/x-log), 2.91 KB, created by Robert Sharp on 2016-12-14 10:31:35 UTC

----
time->Sun Dec  4 04:54:06 2016
type=AVC msg=audit(1480827246.554:34865): avc:  denied  { open } for  pid=16908 comm="resolvconf" path="/proc/meminfo" dev="proc" ino=4026531989 scontext=system_u:system_r:resolvconf_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
type=AVC msg=audit(1480827246.554:34865): avc:  denied  { read } for  pid=16908 comm="resolvconf" name="meminfo" dev="proc" ino=4026531989 scontext=system_u:system_r:resolvconf_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
----
time->Sun Dec  4 04:54:06 2016
type=AVC msg=audit(1480827246.555:34866): avc:  denied  { getattr } for  pid=16908 comm="resolvconf" path="/proc/meminfo" dev="proc" ino=4026531989 scontext=system_u:system_r:resolvconf_t tcontext=system_u:object_r:proc_t tclass=file permissive=1
----
time->Sun Dec  4 04:54:06 2016
type=AVC msg=audit(1480827246.596:34867): avc:  denied  { getattr } for  pid=16908 comm="resolvconf" path="/run/resolvconf/interfaces/enp5s0.dhcp" dev="tmpfs" ino=11920 scontext=system_u:system_r:resolvconf_t tcontext=system_u:object_r:initrc_var_run_t tclass=file permissive=1
----
time->Sun Dec  4 04:54:06 2016
type=AVC msg=audit(1480827246.601:34868): avc:  denied  { open } for  pid=16912 comm="cat" path="/run/resolvconf/interfaces/enp5s0.dhcp" dev="tmpfs" ino=11920 scontext=system_u:system_r:resolvconf_t tcontext=system_u:object_r:initrc_var_run_t tclass=file permissive=1
type=AVC msg=audit(1480827246.601:34868): avc:  denied  { read } for  pid=16912 comm="cat" name="enp5s0.dhcp" dev="tmpfs" ino=11920 scontext=system_u:system_r:resolvconf_t tcontext=system_u:object_r:initrc_var_run_t tclass=file permissive=1
----
time->Sun Dec  4 04:54:06 2016
type=PROCTITLE msg=audit(1480827246.606:34869): proctitle=726D002D66002F7661722F72756E2F7265736F6C76636F6E662F6D6574726963732F3030303030303320656E703573302E64686370
type=PATH msg=audit(1480827246.606:34869): item=1 name=2F7661722F72756E2F7265736F6C76636F6E662F6D6574726963732F3030303030303320656E703573302E64686370 inode=2013304 dev=00:11 mode=0100644 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:initrc_var_run_t nametype=DELETE
type=PATH msg=audit(1480827246.606:34869): item=0 name="/var/run/resolvconf/metrics/" inode=10150 dev=00:11 mode=040755 ouid=0 ogid=0 rdev=00:00 obj=system_u:object_r:resolvconf_var_run_t nametype=PARENT
type=CWD msg=audit(1480827246.606:34869):  cwd="/"
type=SYSCALL msg=audit(1480827246.606:34869): arch=c000003e syscall=263 success=yes exit=0 a0=ffffff9c a1=3ba7583c70 a2=0 a3=30 items=2 ppid=16908 pid=16913 auid=4294967295 uid=0 gid=0 euid=0 suid=0 fsuid=0 egid=0 sgid=0 fsgid=0 tty=(none) ses=4294967295 comm="rm" exe="/bin/rm" subj=system_u:system_r:resolvconf_t key=(null)
type=AVC msg=audit(1480827246.606:34869): avc:  denied  { unlink } for  pid=16913 comm="rm" name=3030303030303320656E703573302E64686370 dev="tmpfs" ino=2013304 scontext=system_u:system_r:resolvconf_t tcontext=system_u:object_r:initrc_var_run_t tclass=file permissive=1