gmesg | grep audit

log (text/plain), 20.16 KB, created by Oruriz on 2017-10-17 23:42:23 UTC

[    0.667114] audit: initializing netlink subsys (disabled)
[    0.667870] audit: type=2000 audit(1508282899.606:1): state=initialized audit_enabled=0 res=1
[    1.541272] audit: type=1403 audit(1508282900.479:2): policy loaded auid=4294967295 ses=4294967295
[    2.073533] audit: type=1400 audit(1508282901.011:3): avc:  denied  { read write } for  pid=1112 comm="lvm" path="/dev/console" dev="devtmpfs" ino=1038 scontext=system_u:system_r:lvm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[    2.089671] audit: type=1400 audit(1508282901.028:4): avc:  denied  { open } for  pid=1112 comm="lvm" path="/dev/urandom" dev="devtmpfs" ino=1035 scontext=system_u:system_r:lvm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[    2.640148] audit: type=1400 audit(1508282901.578:5): avc:  denied  { read write } for  pid=1289 comm="cgroup-release-" name="tty" dev="devtmpfs" ino=1037 scontext=system_u:system_r:openrc_cgroup_release_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[    2.643748] audit: type=1400 audit(1508282901.578:6): avc:  denied  { open } for  pid=1289 comm="cgroup-release-" path="/dev/tty" dev="devtmpfs" ino=1037 scontext=system_u:system_r:openrc_cgroup_release_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[    2.913767] audit: type=1400 audit(1508282901.852:7): avc:  denied  { associate } for  pid=1442 comm="kmod" name="kmod.conf" scontext=system_u:object_r:kmod_tmpfiles_conf_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1
[    3.693947] audit: type=1400 audit(1508282902.632:8): avc:  denied  { search } for  pid=1675 comm="alsactl" name=".config" dev="sda2" ino=3094778 scontext=system_u:system_r:alsa_t tcontext=root:object_r:xdg_config_home_t tclass=dir permissive=1
[    3.695002] audit: type=1400 audit(1508282902.633:9): avc:  denied  { read } for  pid=1675 comm="alsactl" name="pulse" dev="sda2" ino=3094828 scontext=system_u:system_r:alsa_t tcontext=root:object_r:xdg_config_home_t tclass=dir permissive=1
[    5.788781] kauditd_printk_skb: 20 callbacks suppressed
[    5.788786] audit: type=1400 audit(1508282905.642:30): avc:  denied  { search } for  pid=2547 comm="syslog-ng" name="NetworkManager" dev="tmpfs" ino=7651 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:NetworkManager_var_run_t tclass=dir permissive=1
[    5.788792] audit: type=1400 audit(1508282905.642:31): avc:  denied  { read } for  pid=2547 comm="syslog-ng" name="resolv.conf" dev="tmpfs" ino=8609 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:NetworkManager_var_run_t tclass=file permissive=1
[    5.788796] audit: type=1400 audit(1508282905.642:32): avc:  denied  { open } for  pid=2547 comm="syslog-ng" path="/run/NetworkManager/resolv.conf" dev="tmpfs" ino=8609 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:NetworkManager_var_run_t tclass=file permissive=1
[    5.788799] audit: type=1400 audit(1508282905.642:33): avc:  denied  { getattr } for  pid=2547 comm="syslog-ng" path="/run/NetworkManager/resolv.conf" dev="tmpfs" ino=8609 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:NetworkManager_var_run_t tclass=file permissive=1
[    5.839650] audit: type=1400 audit(1508282905.693:34): avc:  denied  { getattr } for  pid=2549 comm="checkpath" path="/var/lib/syslog-ng" dev="sda2" ino=958476 scontext=system_u:system_r:tmpfiles_t tcontext=system_u:object_r:syslogd_var_lib_t tclass=dir permissive=1
[    5.839842] audit: type=1400 audit(1508282905.693:35): avc:  denied  { relabelfrom } for  pid=2549 comm="checkpath" name="syslog-ng" dev="sda2" ino=958476 scontext=system_u:system_r:tmpfiles_t tcontext=system_u:object_r:syslogd_var_lib_t tclass=dir permissive=1
[    5.839870] audit: type=1400 audit(1508282905.693:36): avc:  denied  { relabelto } for  pid=2549 comm="checkpath" name="syslog-ng" dev="sda2" ino=958476 scontext=system_u:system_r:tmpfiles_t tcontext=system_u:object_r:syslogd_var_lib_t tclass=dir permissive=1
[    6.232217] audit: type=1400 audit(1508282906.086:37): avc:  denied  { search } for  pid=2743 comm="sddm" name="sddm" dev="sda2" ino=2437126 scontext=system_u:system_r:xdm_t tcontext=system_u:object_r:xkb_var_lib_t tclass=dir permissive=1
[    6.232602] audit: type=1400 audit(1508282906.086:38): avc:  denied  { getattr } for  pid=2743 comm="sddm" path="/var/lib/sddm/state.conf" dev="sda2" ino=3112407 scontext=system_u:system_r:xdm_t tcontext=system_u:object_r:xkb_var_lib_t tclass=file permissive=1
[    6.232760] audit: type=1400 audit(1508282906.086:39): avc:  denied  { read } for  pid=2743 comm="sddm" name="state.conf" dev="sda2" ino=3112407 scontext=system_u:system_r:xdm_t tcontext=system_u:object_r:xkb_var_lib_t tclass=file permissive=1
[   10.881971] kauditd_printk_skb: 52 callbacks suppressed
[   10.881975] audit: type=1400 audit(1508282910.733:92): avc:  denied  { use } for  pid=2948 comm="QDBusConnection" path="/run/ConsoleKit/inhibit/inhibit.Y4XJ8Y.pipe" dev="tmpfs" ino=10664 scontext=staff_u:staff_r:staff_t tcontext=system_u:system_r:consolekit_t tclass=fd permissive=1
[   10.881979] audit: type=1400 audit(1508282910.733:93): avc:  denied  { write } for  pid=2948 comm="QDBusConnection" path="/run/ConsoleKit/inhibit/inhibit.Y4XJ8Y.pipe" dev="tmpfs" ino=10664 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:consolekit_var_run_t tclass=fifo_file permissive=1
[   10.921450] audit: type=1400 audit(1508282910.775:94): avc:  denied  { read } for  pid=2948 comm="org_kde_powerde" name="rfkill" dev="devtmpfs" ino=1027 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1
[   10.921455] audit: type=1400 audit(1508282910.775:95): avc:  denied  { open } for  pid=2948 comm="org_kde_powerde" path="/dev/rfkill" dev="devtmpfs" ino=1027 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:wireless_device_t tclass=chr_file permissive=1
[   15.406987] audit: type=1400 audit(1508282915.260:96): avc:  denied  { read } for  pid=2923 comm="plasmashell" name="acsr" dev="sda2" ino=3146904 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:accountsd_var_lib_t tclass=file permissive=1
[   15.477771] audit: type=1400 audit(1508282915.331:97): avc:  denied  { open } for  pid=2923 comm="plasmashell" path="/var/lib/AccountsService/icons/acsr" dev="sda2" ino=3146904 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:accountsd_var_lib_t tclass=file permissive=1
[   15.489508] audit: type=1400 audit(1508282915.343:98): avc:  denied  { execmem } for  pid=2923 comm="QQmlThread" scontext=staff_u:staff_r:staff_t tcontext=staff_u:staff_r:staff_t tclass=process permissive=1
[   22.241906] audit: type=1400 audit(1508282922.095:99): avc:  denied  { search } for  pid=3114 comm="su" name="files" dev="sda2" ino=3896944 scontext=staff_u:staff_r:staff_su_t tcontext=system_u:object_r:file_context_t tclass=dir permissive=1
[   22.241911] audit: type=1400 audit(1508282922.095:100): avc:  denied  { read } for  pid=3114 comm="su" name="file_contexts.subs_dist" dev="sda2" ino=3899800 scontext=staff_u:staff_r:staff_su_t tcontext=system_u:object_r:file_context_t tclass=file permissive=1
[   22.241913] audit: type=1400 audit(1508282922.095:101): avc:  denied  { open } for  pid=3114 comm="su" path="/etc/selinux/strict/contexts/files/file_contexts.subs_dist" dev="sda2" ino=3899800 scontext=staff_u:staff_r:staff_su_t tcontext=system_u:object_r:file_context_t tclass=file permissive=1
[   22.241924] audit: type=1400 audit(1508282922.095:102): avc:  denied  { getattr } for  pid=3114 comm="su" path="/etc/selinux/strict/contexts/files/file_contexts.subs_dist" dev="sda2" ino=3899800 scontext=staff_u:staff_r:staff_su_t tcontext=system_u:object_r:file_context_t tclass=file permissive=1
[   22.243570] audit: type=1400 audit(1508282922.097:103): avc:  denied  { setfscreate } for  pid=3114 comm="su" scontext=staff_u:staff_r:staff_su_t tcontext=staff_u:staff_r:staff_su_t tclass=process permissive=1
[   22.243576] audit: type=1400 audit(1508282922.097:104): avc:  denied  { write } for  pid=3114 comm="su" name="root" dev="sda2" ino=41618 scontext=staff_u:staff_r:staff_su_t tcontext=root:object_r:user_home_dir_t tclass=dir permissive=1
[   22.243580] audit: type=1400 audit(1508282922.097:105): avc:  denied  { add_name } for  pid=3114 comm="su" name=".xauthWnI0JA" scontext=staff_u:staff_r:staff_su_t tcontext=root:object_r:user_home_dir_t tclass=dir permissive=1
[   22.243584] audit: type=1400 audit(1508282922.097:106): avc:  denied  { create } for  pid=3114 comm="su" name=".xauthWnI0JA" scontext=staff_u:staff_r:staff_su_t tcontext=root:object_r:xauth_home_t tclass=file permissive=1
[   22.243864] audit: type=1400 audit(1508282922.097:107): avc:  denied  { read write open } for  pid=3114 comm="su" path="/root/.xauthWnI0JA" dev="sda2" ino=4145434 scontext=staff_u:staff_r:staff_su_t tcontext=root:object_r:xauth_home_t tclass=file permissive=1
[   22.246249] audit: type=1400 audit(1508282922.100:108): avc:  denied  { write } for  pid=3119 comm="xauth" name="root" dev="sda2" ino=41618 scontext=staff_u:staff_r:xauth_t tcontext=root:object_r:user_home_dir_t tclass=dir permissive=1
[   28.638627] kauditd_printk_skb: 9 callbacks suppressed
[   28.638633] audit: type=1400 audit(1508282928.492:118): avc:  denied  { read } for  pid=3125 comm="dmesg" name="kmsg" dev="devtmpfs" ino=1036 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[   28.638663] audit: type=1400 audit(1508282928.492:119): avc:  denied  { open } for  pid=3125 comm="dmesg" path="/dev/kmsg" dev="devtmpfs" ino=1036 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  221.169379] audit: type=1400 audit(1508283121.020:120): avc:  denied  { write } for  pid=3168 comm="bash" name="THome" dev="sda2" ino=3800316 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:default_t tclass=dir permissive=1
[  221.169409] audit: type=1400 audit(1508283121.020:121): avc:  denied  { add_name } for  pid=3168 comm="bash" name="log" scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:default_t tclass=dir permissive=1
[  221.169486] audit: type=1400 audit(1508283121.020:122): avc:  denied  { create } for  pid=3168 comm="bash" name="log" scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:default_t tclass=file permissive=1
[  221.169909] audit: type=1400 audit(1508283121.020:123): avc:  denied  { write } for  pid=3168 comm="bash" path="/extDir/THome/log" dev="sda2" ino=4145437 scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:default_t tclass=file permissive=1
[  241.472469] audit: type=1400 audit(1508283141.322:124): avc:  denied  { write } for  pid=3129 comm="dolphin" name="sf_VboxExt" dev="sda2" ino=3146837 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1
[  247.593048] audit: type=1400 audit(1508283147.443:125): avc:  denied  { add_name } for  pid=3173 comm="bash" name="log" scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1
[  247.593124] audit: type=1400 audit(1508283147.443:126): avc:  denied  { create } for  pid=3173 comm="bash" name="log" scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:mnt_t tclass=file permissive=1
[  247.593555] audit: type=1400 audit(1508283147.443:127): avc:  denied  { write open } for  pid=3173 comm="bash" path="/media/sf_VboxExt/log" dev="sda2" ino=4145438 scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:mnt_t tclass=file permissive=1
[  248.268749] audit: type=1400 audit(1508283148.118:128): avc:  denied  { read } for  pid=3129 comm="dolphin" name="log" dev="sda2" ino=4145438 scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:mnt_t tclass=file permissive=1
[  262.956612] audit: type=1400 audit(1508283162.806:129): avc:  denied  { remove_name } for  pid=3129 comm="dolphin" name="log" dev="sda2" ino=4145438 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:mnt_t tclass=dir permissive=1
[  262.956627] audit: type=1400 audit(1508283162.806:130): avc:  denied  { unlink } for  pid=3129 comm="dolphin" name="log" dev="sda2" ino=4145438 scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:mnt_t tclass=file permissive=1
[  289.528741] audit: type=1400 audit(1508283189.377:131): avc:  denied  { read } for  pid=1727 comm="ModemManager" scontext=system_u:system_r:system_dbusd_t tcontext=system_u:system_r:system_dbusd_t tclass=netlink_kobject_uevent_socket permissive=1
[  301.767789] audit: type=1400 audit(1508283201.617:132): avc:  denied  { getattr } for  pid=28 comm="kdevtmpfs" path="/bsg/4:0:0:0" dev="devtmpfs" ino=10827 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  301.767795] audit: type=1400 audit(1508283201.617:133): avc:  denied  { setattr } for  pid=28 comm="kdevtmpfs" name="4:0:0:0" dev="devtmpfs" ino=10827 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  301.767799] audit: type=1400 audit(1508283201.617:134): avc:  denied  { unlink } for  pid=28 comm="kdevtmpfs" name="4:0:0:0" dev="devtmpfs" ino=10827 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:scsi_generic_device_t tclass=chr_file permissive=1
[  301.775469] audit: type=1400 audit(1508283201.624:135): avc:  denied  { getattr } for  pid=28 comm="kdevtmpfs" path="/sdc" dev="devtmpfs" ino=10832 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  301.775476] audit: type=1400 audit(1508283201.624:136): avc:  denied  { setattr } for  pid=28 comm="kdevtmpfs" name="sdc" dev="devtmpfs" ino=10832 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  301.775480] audit: type=1400 audit(1508283201.624:137): avc:  denied  { unlink } for  pid=28 comm="kdevtmpfs" name="sdc" dev="devtmpfs" ino=10832 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  301.780621] audit: type=1400 audit(1508283201.630:138): avc:  denied  { getattr } for  pid=28 comm="kdevtmpfs" path="/bus/usb/001/002" dev="devtmpfs" ino=10825 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  301.780626] audit: type=1400 audit(1508283201.630:139): avc:  denied  { setattr } for  pid=28 comm="kdevtmpfs" name="002" dev="devtmpfs" ino=10825 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  301.780630] audit: type=1400 audit(1508283201.630:140): avc:  denied  { unlink } for  pid=28 comm="kdevtmpfs" name="002" dev="devtmpfs" ino=10825 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1
[  301.783121] audit: type=1400 audit(1508283201.632:141): avc:  denied  { read } for  pid=1727 comm="ModemManager" scontext=system_u:system_r:system_dbusd_t tcontext=system_u:system_r:system_dbusd_t tclass=netlink_kobject_uevent_socket permissive=1
[  323.604676] audit: type=1400 audit(1508283223.453:142): avc:  denied  { getattr } for  pid=3212 comm="ls" path="/proc/kcore" dev="proc" ino=4026532006 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:proc_kcore_t tclass=file permissive=1
[  332.706239] audit: type=1400 audit(1508283232.555:143): avc:  denied  { read } for  pid=3216 comm="mount" name="sdc1" dev="devtmpfs" ino=10841 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.706256] audit: type=1400 audit(1508283232.555:144): avc:  denied  { open } for  pid=3216 comm="mount" path="/dev/sdc1" dev="devtmpfs" ino=10841 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  332.708773] audit: type=1400 audit(1508283232.557:145): avc:  denied  { ioctl } for  pid=3216 comm="mount" path="/dev/sdc1" dev="devtmpfs" ino=10841 ioctlcmd=0x1272 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[  343.875982] audit: type=1400 audit(1508283243.724:146): avc:  denied  { create } for  pid=3219 comm="mkdir" name="1" scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:mnt_t tclass=dir permissive=1
[  348.173187] audit: type=1400 audit(1508283248.021:147): avc:  denied  { read write } for  pid=3221 comm="mount" name="utab" dev="tmpfs" ino=1589 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:mount_runtime_t tclass=file permissive=1
[  348.173195] audit: type=1400 audit(1508283248.021:148): avc:  denied  { open } for  pid=3221 comm="mount" path="/run/mount/utab" dev="tmpfs" ino=1589 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:mount_runtime_t tclass=file permissive=1
[  348.173200] audit: type=1400 audit(1508283248.022:149): avc:  denied  { mounton } for  pid=3221 comm="mount" path="/media/1" dev="sda2" ino=4145439 scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:mnt_t tclass=dir permissive=1
[  348.229170] audit: type=1400 audit(1508283248.077:150): avc:  denied  { mount } for  pid=3221 comm="mount" name="/" dev="sdc1" ino=1 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1
[  348.229177] audit: type=1400 audit(1508283248.077:151): avc:  denied  { write } for  pid=3221 comm="mount" name="/" dev="sdc1" ino=1 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  354.852068] audit: type=1400 audit(1508283254.700:152): avc:  denied  { read } for  pid=3223 comm="dmesg" name="kmsg" dev="devtmpfs" ino=1036 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  354.852075] audit: type=1400 audit(1508283254.700:153): avc:  denied  { open } for  pid=3223 comm="dmesg" path="/dev/kmsg" dev="devtmpfs" ino=1036 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:kmsg_device_t tclass=chr_file permissive=1
[  357.418828] audit: type=1400 audit(1508283257.267:154): avc:  denied  { add_name } for  pid=3226 comm="bash" name="log" scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:dosfs_t tclass=dir permissive=1
[  357.419363] audit: type=1400 audit(1508283257.268:155): avc:  denied  { create } for  pid=3226 comm="bash" name="log" scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:dosfs_t tclass=file permissive=1
[  357.419481] audit: type=1400 audit(1508283257.268:156): avc:  denied  { write } for  pid=3226 comm="bash" path="/media/1/log" dev="sdc1" ino=3 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:dosfs_t tclass=file permissive=1
[  389.036475] audit: type=1400 audit(1508283288.884:157): avc:  denied  { dac_read_search } for  pid=2590 comm="console-kit-dae" capability=2  scontext=system_u:system_r:consolekit_t tcontext=system_u:system_r:consolekit_t tclass=capability permissive=1
[  389.060090] audit: type=1400 audit(1508283288.908:158): avc:  denied  { read } for  pid=3250 comm="mount" name="f2405f3e-cf81-41e4-b38a-ca9ac28d4fd9" dev="tmpfs" ino=12422 scontext=system_u:system_r:mount_t tcontext=system_u:object_r:devicekit_var_run_t tclass=dir permissive=1
[  389.060098] audit: type=1400 audit(1508283288.908:159): avc:  denied  { ioctl } for  pid=3250 comm="mount" path="/run/media/acsr/f2405f3e-cf81-41e4-b38a-ca9ac28d4fd9" dev="tmpfs" ino=12422 ioctlcmd=0x9411 scontext=system_u:system_r:mount_t tcontext=system_u:object_r:devicekit_var_run_t tclass=dir permissive=1
[  389.060101] audit: type=1400 audit(1508283288.908:160): avc:  denied  { mounton } for  pid=3250 comm="mount" path="/run/media/acsr/f2405f3e-cf81-41e4-b38a-ca9ac28d4fd9" dev="tmpfs" ino=12422 scontext=system_u:system_r:mount_t tcontext=system_u:object_r:devicekit_var_run_t tclass=dir permissive=1
[  389.413550] audit: type=1400 audit(1508283289.261:161): avc:  denied  { write } for  pid=3129 comm="dolphin" name="/" dev="sdd" ino=256 scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  399.107727] audit: type=1400 audit(1508283298.955:162): avc:  denied  { add_name } for  pid=3273 comm="bash" name="log" scontext=staff_u:staff_r:staff_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[  399.107734] audit: type=1400 audit(1508283298.955:163): avc:  denied  { create } for  pid=3273 comm="bash" name="log" scontext=staff_u:staff_r:staff_t tcontext=staff_u:object_r:unlabeled_t tclass=file permissive=1