Project

General

Profile

Actions
Copy link

Bug #22302

closed

selinux denials with ceph-deploy/ceph-volume lvm device

Added by Vasu Kulkarni over 6 years ago. Updated almost 6 years ago.

Status:
Resolved
Priority:
High
Assignee:
Boris Ranto
Category:
-
Target version:
-
% Done:

0%

Source:
Tags:
Backport:
luminous, mimic
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

I see quite a few selinux denials with ceph-deploy using ceph-volume + lvm devices, this is a new test

http://qa-proxy.ceph.com/teuthology/vasu-2017-12-01_22:22:00-ceph-deploy-master-distro-basic-smithi/1912694/teuthology.log

2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.719:9791): avc:  denied  { read } for  pid=15371 comm="ceph-osd" name="type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.719:9791): avc:  denied  { open } for  pid=15371 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-0/type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9792): avc:  denied  { read } for  pid=15371 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9793): avc:  denied  { read } for  pid=15371 comm="ceph-osd" name="journal" dev="dm-1" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file
2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9794): avc:  denied  { write } for  pid=15371 comm="ceph-osd" name="fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9795): avc:  denied  { lock } for  pid=15371 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-0/fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9796): avc:  denied  { write } for  pid=15371 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9797): avc:  denied  { add_name } for  pid=15371 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9797): avc:  denied  { create } for  pid=15371 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9797): avc:  denied  { read write open } for  pid=15371 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-0/fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.730:9798): avc:  denied  { remove_name } for  pid=15371 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.730:9798): avc:  denied  { unlink } for  pid=15371 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.730:9799): avc:  denied  { setattr } for  pid=15371 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.730:9800): avc:  denied  { getattr } for  pid=15371 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.731:9801): avc:  denied  { read } for  pid=15371 comm="ceph-osd" name="current" dev="dm-1" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.731:9802): avc:  denied  { getattr } for  pid=15371 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-0/current/omap/osd_uuid" dev="dm-1" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.732:9803): avc:  denied  { write } for  pid=15371 comm="ceph-osd" name="omap" dev="dm-1" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.732:9803): avc:  denied  { add_name } for  pid=15371 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.733:9804): avc:  denied  { remove_name } for  pid=15371 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.733:9804): avc:  denied  { rename } for  pid=15371 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.733:9804): avc:  denied  { unlink } for  pid=15371 comm="ceph-osd" name="CURRENT" dev="dm-1" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.737:9805): avc:  denied  { setattr } for  pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173395.822:9815): avc:  denied  { write } for  pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173395.822:9815): avc:  denied  { add_name } for  pid=15371 comm="tp_fstore_op" name="inc\uosdmap.6__0_B65F4796__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173395.822:9816): avc:  denied  { read } for  pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173395.822:9817): avc:  denied  { setattr } for  pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.592:9974): avc:  denied  { read } for  pid=15797 comm="ceph-osd" name="type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.592:9974): avc:  denied  { open } for  pid=15797 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-1/type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.603:9975): avc:  denied  { read } for  pid=15797 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.603:9976): avc:  denied  { read } for  pid=15797 comm="ceph-osd" name="journal" dev="dm-2" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9977): avc:  denied  { write } for  pid=15797 comm="ceph-osd" name="fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9978): avc:  denied  { lock } for  pid=15797 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-1/fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9979): avc:  denied  { write } for  pid=15797 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9980): avc:  denied  { add_name } for  pid=15797 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9980): avc:  denied  { create } for  pid=15797 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9980): avc:  denied  { read write open } for  pid=15797 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-1/fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9981): avc:  denied  { remove_name } for  pid=15797 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9981): avc:  denied  { unlink } for  pid=15797 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.605:9982): avc:  denied  { setattr } for  pid=15797 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.605:9983): avc:  denied  { getattr } for  pid=15797 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.605:9984): avc:  denied  { getattr } for  pid=15797 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-1/current/omap/osd_uuid" dev="dm-2" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.286 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.610:9985): avc:  denied  { remove_name } for  pid=15797 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.286 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.610:9985): avc:  denied  { rename } for  pid=15797 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.610:9985): avc:  denied  { unlink } for  pid=15797 comm="ceph-osd" name="CURRENT" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.243:9998): avc:  denied  { write } for  pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.243:9998): avc:  denied  { add_name } for  pid=15371 comm="tp_fstore_op" name="inc\uosdmap.9__0_B65F4586__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.243:9998): avc:  denied  { create } for  pid=15371 comm="tp_fstore_op" name="inc\uosdmap.9__0_B65F4586__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.244:9999): avc:  denied  { create } for  pid=15797 comm="tp_fstore_op" name="inc\uosdmap.9__0_B65F4586__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.243:9998): avc:  denied  { read write open } for  pid=15371 comm="tp_fstore_op" path="/var/lib/ceph/osd/ceph-0/current/meta/inc\uosdmap.9__0_B65F4586__none" dev="dm-1" ino=33577363 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.244:10000): avc:  denied  { read } for  pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.244:10001): avc:  denied  { setattr } for  pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.244:10002): avc:  denied  { setattr } for  pid=15797 comm="tp_fstore_op" name="inc\uosdmap.9__0_B65F4586__none" dev="dm-2" ino=33577363 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173429.269:10019): avc:  denied  { write } for  pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173429.269:10019): avc:  denied  { add_name } for  pid=15797 comm="tp_fstore_op" name="inc\uosdmap.18__0_F4E9DA83__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173429.269:10020): avc:  denied  { read } for  pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173429.270:10021): avc:  denied  { setattr } for  pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173450.115:10034): avc:  denied  { execute } for  pid=16549 comm="sh" name="ldconfig" dev="sda1" ino=5201 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173450.115:10034): avc:  denied  { read open } for  pid=16549 comm="sh" path="/usr/sbin/ldconfig" dev="sda1" ino=5201 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173450.115:10034): avc:  denied  { execute_no_trans } for  pid=16549 comm="sh" path="/usr/sbin/ldconfig" dev="sda1" ino=5201 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.908:10044): avc:  denied  { create } for  pid=15371 comm="tp_fstore_op" name="inc\uosdmap.26__0_F4E9DCD3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.908:10044): avc:  denied  { read write open } for  pid=15371 comm="tp_fstore_op" path="/var/lib/ceph/osd/ceph-0/current/meta/inc\uosdmap.26__0_F4E9DCD3__none" dev="dm-1" ino=33577397 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.908:10045): avc:  denied  { setattr } for  pid=15371 comm="tp_fstore_op" name="inc\uosdmap.26__0_F4E9DCD3__none" dev="dm-1" ino=33577397 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.290 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.909:10046): avc:  denied  { create } for  pid=15371 comm="tp_fstore_op" name="1.11_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.911:10047): avc:  denied  { write } for  pid=15371 comm="tp_fstore_op" name="1.11_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.911:10047): avc:  denied  { setattr } for  pid=15371 comm="tp_fstore_op" name="1.11_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.911:10048): avc:  denied  { read } for  pid=15371 comm="tp_fstore_op" name="1.11_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.913:10049): avc:  denied  { add_name } for  pid=15371 comm="tp_fstore_op" name="__head_00000011__1" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173463.114:10063): avc:  denied  { getattr } for  pid=15797 comm="tp_osd_tp" path="/var/lib/ceph/osd/ceph-1/current/meta/snapmapper__0_A468EC03__none" dev="dm-2" ino=33577346 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173466.153:10064): avc:  denied  { remove_name } for  pid=15371 comm="tp_fstore_op" name="rbd\udata.108d2ae8944a.0000000000000000__head_C315240B__1" dev="dm-1" ino=50331756 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173466.153:10064): avc:  denied  { unlink } for  pid=15371 comm="tp_fstore_op" name="rbd\udata.108d2ae8944a.0000000000000000__head_C315240B__1" dev="dm-1" ino=50331756 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173483.136:10067): avc:  denied  { write } for  pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173483.136:10067): avc:  denied  { add_name } for  pid=15797 comm="tp_fstore_op" name="inc\uosdmap.35__0_F4E9D7B3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173483.136:10068): avc:  denied  { read } for  pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173483.137:10069): avc:  denied  { setattr } for  pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10167): avc:  denied  { write open } for  pid=15797 comm="signal_handler" name="000009.log" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10168): avc:  denied  { getattr } for  pid=15797 comm="signal_handler" path="/var/lib/ceph/osd/ceph-1/current/omap/000009.log" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10169): avc:  denied  { write open } for  pid=15371 comm="signal_handler" name="000009.log" dev="dm-1" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10170): avc:  denied  { getattr } for  pid=15797 comm="signal_handler" path="/var/lib/ceph/osd/ceph-1/current/omap/MANIFEST-000008" dev="dm-2" ino=16777259 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.296 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10171): avc:  denied  { lock } for  pid=15797 comm="signal_handler" path="/var/lib/ceph/osd/ceph-1/current/omap/LOCK" dev="dm-2" ino=16777250 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.296 DEBUG:teuthology.task.selinux:ubuntu@smithi172.front.sepia.ceph.com has 79 denials
2017-12-02T00:12:28.296 INFO:teuthology.orchestra.run.smithi065:Running: 'sudo grep \'avc: .*denied\' /var/log/audit/audit.log | grep -v \'\\(comm="dmidecode"\\|chronyd.service\\|name="cephtest"\\|scontext=system_u:system_r:nrpe_t:s0\\|scontext=system_u:system_r:pcp_pmlogger_t\\|scontext=system_u:system_r:pcp_pmcd_t:s0\\)\''
2017-12-02T00:12:28.386 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.132:9700): avc:  denied  { read } for  pid=14256 comm="ceph-osd" name="type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.386 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.132:9700): avc:  denied  { open } for  pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.386 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.150:9701): avc:  denied  { read } for  pid=14256 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.150:9702): avc:  denied  { read } for  pid=14256 comm="ceph-osd" name="journal" dev="dm-1" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file
2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9703): avc:  denied  { read write } for  pid=14256 comm="ceph-osd" name="fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9703): avc:  denied  { open } for  pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9704): avc:  denied  { lock } for  pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9705): avc:  denied  { write } for  pid=14256 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9706): avc:  denied  { add_name } for  pid=14256 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9706): avc:  denied  { create } for  pid=14256 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9706): avc:  denied  { read write open } for  pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.152:9707): avc:  denied  { remove_name } for  pid=14256 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.152:9707): avc:  denied  { unlink } for  pid=14256 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.152:9708): avc:  denied  { setattr } for  pid=14256 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.152:9709): avc:  denied  { getattr } for  pid=14256 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.153:9710): avc:  denied  { read } for  pid=14256 comm="ceph-osd" name="current" dev="dm-1" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.153:9711): avc:  denied  { getattr } for  pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/current/omap/osd_uuid" dev="dm-1" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.155:9712): avc:  denied  { write } for  pid=14256 comm="ceph-osd" name="omap" dev="dm-1" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.155:9712): avc:  denied  { add_name } for  pid=14256 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.156:9713): avc:  denied  { remove_name } for  pid=14256 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.156:9713): avc:  denied  { rename } for  pid=14256 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.156:9713): avc:  denied  { unlink } for  pid=14256 comm="ceph-osd" name="CURRENT" dev="dm-1" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.160:9714): avc:  denied  { setattr } for  pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173434.775:9715): avc:  denied  { write } for  pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173434.775:9715): avc:  denied  { add_name } for  pid=14256 comm="tp_fstore_op" name="inc\uosdmap.1__0_B65F4306__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173434.775:9716): avc:  denied  { read } for  pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173434.775:9717): avc:  denied  { setattr } for  pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9773): avc:  denied  { write } for  pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9773): avc:  denied  { add_name } for  pid=14256 comm="tp_fstore_op" name="inc\uosdmap.22__0_F4E9D913__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9773): avc:  denied  { create } for  pid=14256 comm="tp_fstore_op" name="inc\uosdmap.22__0_F4E9D913__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9773): avc:  denied  { read write open } for  pid=14256 comm="tp_fstore_op" path="/var/lib/ceph/osd/ceph-4/current/meta/inc\uosdmap.22__0_F4E9D913__none" dev="dm-1" ino=33577389 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9774): avc:  denied  { read } for  pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9775): avc:  denied  { setattr } for  pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9776): avc:  denied  { setattr } for  pid=14256 comm="tp_fstore_op" name="inc\uosdmap.22__0_F4E9D913__none" dev="dm-1" ino=33577389 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.907:9933): avc:  denied  { read } for  pid=14704 comm="ceph-osd" name="type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.907:9933): avc:  denied  { open } for  pid=14704 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-5/type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.920:9934): avc:  denied  { read } for  pid=14704 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.920:9935): avc:  denied  { read } for  pid=14704 comm="ceph-osd" name="journal" dev="dm-2" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9936): avc:  denied  { write } for  pid=14704 comm="ceph-osd" name="fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9937): avc:  denied  { lock } for  pid=14704 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-5/fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9938): avc:  denied  { write } for  pid=14704 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9939): avc:  denied  { add_name } for  pid=14704 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9939): avc:  denied  { create } for  pid=14704 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9939): avc:  denied  { read write open } for  pid=14704 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-5/fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.922:9940): avc:  denied  { remove_name } for  pid=14704 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.922:9940): avc:  denied  { unlink } for  pid=14704 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.923:9941): avc:  denied  { setattr } for  pid=14704 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.923:9942): avc:  denied  { getattr } for  pid=14704 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.923:9943): avc:  denied  { read } for  pid=14704 comm="ceph-osd" name="current" dev="dm-2" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.923:9944): avc:  denied  { getattr } for  pid=14704 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-5/current/omap/osd_uuid" dev="dm-2" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.925:9945): avc:  denied  { write } for  pid=14704 comm="ceph-osd" name="omap" dev="dm-2" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.925:9945): avc:  denied  { add_name } for  pid=14704 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.927:9946): avc:  denied  { remove_name } for  pid=14704 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.927:9946): avc:  denied  { rename } for  pid=14704 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.927:9946): avc:  denied  { unlink } for  pid=14704 comm="ceph-osd" name="CURRENT" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.934:9947): avc:  denied  { setattr } for  pid=14704 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.898:10065): avc:  denied  { create } for  pid=14704 comm="tp_fstore_op" name="1.1_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.899:10066): avc:  denied  { create } for  pid=14256 comm="tp_fstore_op" name="1.4_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.900:10067): avc:  denied  { write } for  pid=14256 comm="tp_fstore_op" name="1.4_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.900:10067): avc:  denied  { setattr } for  pid=14256 comm="tp_fstore_op" name="1.4_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.900:10068): avc:  denied  { read } for  pid=14256 comm="tp_fstore_op" name="1.4_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.903:10069): avc:  denied  { add_name } for  pid=14704 comm="tp_fstore_op" name="__head_00000001__1" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173463.102:10070): avc:  denied  { write } for  pid=14704 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173463.102:10070): avc:  denied  { add_name } for  pid=14704 comm="tp_fstore_op" name="inc\uosdmap.29__0_F4E9D2C3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173463.102:10071): avc:  denied  { read } for  pid=14704 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173463.102:10072): avc:  denied  { setattr } for  pid=14704 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173464.114:10073): avc:  denied  { write } for  pid=14256 comm="tp_fstore_op" name="1.3a_head" dev="dm-1" ino=50331692 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173464.114:10073): avc:  denied  { add_name } for  pid=14256 comm="tp_fstore_op" name="rbd\uinfo__head_AC0E573A__1" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.394 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173464.114:10074): avc:  denied  { read } for  pid=14256 comm="tp_fstore_op" name="1.3a_head" dev="dm-1" ino=50331692 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.394 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173464.114:10075): avc:  denied  { setattr } for  pid=14256 comm="tp_fstore_op" name="1.3a_head" dev="dm-1" ino=50331692 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.394 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173466.143:10076): avc:  denied  { remove_name } for  pid=14256 comm="tp_fstore_op" name="rbd\udata.108d2ae8944a.0000000000000000__head_C315240B__1" dev="dm-1" ino=85 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.394 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173483.120:10092): avc:  denied  { lock } for  pid=14704 comm="signal_handler" path="/var/lib/ceph/osd/ceph-5/current/omap/LOCK" dev="dm-2" ino=16777250 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.395 DEBUG:teuthology.task.selinux:ubuntu@smithi065.front.sepia.ceph.com has 72 denials
2017-12-02T00:12:28.395 INFO:teuthology.orchestra.run.smithi169:Running: 'sudo grep \'avc: .*denied\' /var/log/audit/audit.log | grep -v \'\\(comm="dmidecode"\\|chronyd.service\\|name="cephtest"\\|scontext=system_u:system_r:nrpe_t:s0\\|scontext=system_u:system_r:pcp_pmlogger_t\\|scontext=system_u:system_r:pcp_pmcd_t:s0\\)\''
2017-12-02T00:12:28.478 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.879:9700): avc:  denied  { read } for  pid=13883 comm="ceph-osd" name="type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.478 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.879:9700): avc:  denied  { open } for  pid=13883 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-2/type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.478 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.889:9701): avc:  denied  { read } for  pid=13883 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.478 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.889:9702): avc:  denied  { read } for  pid=13883 comm="ceph-osd" name="journal" dev="dm-1" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file
2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9703): avc:  denied  { write } for  pid=13883 comm="ceph-osd" name="fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9704): avc:  denied  { lock } for  pid=13883 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-2/fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9705): avc:  denied  { write } for  pid=13883 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9706): avc:  denied  { add_name } for  pid=13883 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9706): avc:  denied  { create } for  pid=13883 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9706): avc:  denied  { read write open } for  pid=13883 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-2/fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9707): avc:  denied  { remove_name } for  pid=13883 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9707): avc:  denied  { unlink } for  pid=13883 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9708): avc:  denied  { setattr } for  pid=13883 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9709): avc:  denied  { getattr } for  pid=13883 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9710): avc:  denied  { read } for  pid=13883 comm="ceph-osd" name="current" dev="dm-1" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9711): avc:  denied  { getattr } for  pid=13883 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-2/current/omap/osd_uuid" dev="dm-1" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9712): avc:  denied  { write } for  pid=13883 comm="ceph-osd" name="omap" dev="dm-1" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9712): avc:  denied  { add_name } for  pid=13883 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9713): avc:  denied  { remove_name } for  pid=13883 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9713): avc:  denied  { rename } for  pid=13883 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9713): avc:  denied  { unlink } for  pid=13883 comm="ceph-osd" name="CURRENT" dev="dm-1" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.895:9714): avc:  denied  { setattr } for  pid=13883 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9770): avc:  denied  { write } for  pid=13883 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9770): avc:  denied  { add_name } for  pid=13883 comm="tp_fstore_op" name="inc\uosdmap.14__0_F4E9C7C3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9770): avc:  denied  { create } for  pid=13883 comm="tp_fstore_op" name="inc\uosdmap.14__0_F4E9C7C3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9770): avc:  denied  { read write open } for  pid=13883 comm="tp_fstore_op" path="/var/lib/ceph/osd/ceph-2/current/meta/inc\uosdmap.14__0_F4E9C7C3__none" dev="dm-1" ino=33577373 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9771): avc:  denied  { read } for  pid=13883 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9772): avc:  denied  { setattr } for  pid=13883 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9773): avc:  denied  { setattr } for  pid=13883 comm="tp_fstore_op" name="inc\uosdmap.14__0_F4E9C7C3__none" dev="dm-1" ino=33577373 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.669:9930): avc:  denied  { read } for  pid=14380 comm="ceph-osd" name="type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.669:9930): avc:  denied  { open } for  pid=14380 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-3/type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.678:9931): avc:  denied  { read } for  pid=14380 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.678:9932): avc:  denied  { read } for  pid=14380 comm="ceph-osd" name="journal" dev="dm-2" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9933): avc:  denied  { write } for  pid=14380 comm="ceph-osd" name="fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9934): avc:  denied  { lock } for  pid=14380 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-3/fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9935): avc:  denied  { write } for  pid=14380 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9936): avc:  denied  { add_name } for  pid=14380 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9936): avc:  denied  { create } for  pid=14380 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9936): avc:  denied  { read write open } for  pid=14380 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-3/fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9937): avc:  denied  { remove_name } for  pid=14380 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9937): avc:  denied  { unlink } for  pid=14380 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.680:9938): avc:  denied  { setattr } for  pid=14380 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.680:9939): avc:  denied  { getattr } for  pid=14380 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.681:9940): avc:  denied  { read } for  pid=14380 comm="ceph-osd" name="current" dev="dm-2" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.681:9941): avc:  denied  { getattr } for  pid=14380 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-3/current/omap/osd_uuid" dev="dm-2" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.682:9942): avc:  denied  { write } for  pid=14380 comm="ceph-osd" name="omap" dev="dm-2" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.682:9942): avc:  denied  { add_name } for  pid=14380 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.684:9943): avc:  denied  { remove_name } for  pid=14380 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.684:9943): avc:  denied  { rename } for  pid=14380 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.684:9943): avc:  denied  { unlink } for  pid=14380 comm="ceph-osd" name="CURRENT" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file
2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.692:9944): avc:  denied  { setattr } for  pid=14380 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.484 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173454.906:9956): avc:  denied  { create } for  pid=13883 comm="tp_fstore_op" name="1.2_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.484 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173454.906:9957): avc:  denied  { create } for  pid=14380 comm="tp_fstore_op" name="1.0_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir
2017-12-02T00:12:28.484 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173454.907:9958): avc:  denied  { write } for  pid=14380 comm="tp_fstore_op" name="1.0_head" dev="dm-2" ino=50331680 scontext=system_u:system_r:ceph_t:s0

Related issues 3 (0 open — 3 closed)

Has duplicate devops - Bug #23843: avc: denied { block_suspend } for pid=34841 comm="msgr-worker-1"DuplicateBoris Ranto04/24/2018

Actions
Copied to Ceph - Backport #24113: mimic: selinux denials with ceph-deploy/ceph-volume lvm deviceResolvedKefu ChaiActions
Copied to Ceph - Backport #24122: luminous: selinux denials with ceph-deploy/ceph-volume lvm deviceResolvedBoris RantoActions
Actions
Copy link
 #1

Updated by Vasu Kulkarni over 6 years ago

probably dev="dm-1"/"dm-2"

Actions
Copy link
 #2

Updated by Alfredo Deza over 6 years ago

  • Project changed from devops to ceph-volume
  • Status changed from New to 12
  • Assignee deleted (Boris Ranto)

ceph-volume isn't fully doing the restorecon dance yet.

Actions
Copy link
 #3

Updated by Alfredo Deza over 6 years ago

  • Assignee set to Alfredo Deza
Actions
Copy link
 #4

Updated by Alfredo Deza about 6 years ago

  • Project changed from ceph-volume to Ceph
  • Assignee changed from Alfredo Deza to Boris Ranto

Boris we need a bit of help here, unsure how to go around these. I believe Ken mentioned this is just a matter of defining the rules? Let me know if I can help.

Actions
Copy link
 #5

Updated by Alfredo Deza about 6 years ago

  • Assignee changed from Boris Ranto to Alfredo Deza
Actions
Copy link
 #6

Updated by Boris Ranto about 6 years ago

The ldconfig part should be fixed by updating the SELinux policy:

https://github.com/ceph/ceph/pull/20118

The rest of the denials should be fixed by running restorecon on the root of the mounted file system after the mount.

Actions
Copy link
 #7

Updated by Nathan Cutler about 6 years ago

  • Backport set to luminous
Actions
Copy link
 #8

Updated by Nathan Cutler about 6 years ago

  • Status changed from 12 to Fix Under Review
Actions
Copy link
 #9

Updated by Kefu Chai almost 6 years ago

  • Status changed from Fix Under Review to Pending Backport
  • Backport changed from luminous to luminous, mimic
Actions
Copy link
 #10

Updated by Kefu Chai almost 6 years ago

  • Copied to Backport #24113: mimic: selinux denials with ceph-deploy/ceph-volume lvm device added
Actions
Copy link
 #11

Updated by Nathan Cutler almost 6 years ago

  • Assignee changed from Alfredo Deza to Boris Ranto
Actions
Copy link
 #12

Updated by Nathan Cutler almost 6 years ago

  • Copied to Backport #24122: luminous: selinux denials with ceph-deploy/ceph-volume lvm device added
Actions
Copy link
 #13

Updated by Kefu Chai almost 6 years ago

  • Status changed from Pending Backport to Resolved
Actions
Copy link
 #14

Updated by Ken Dreyer almost 6 years ago

  • Related to Bug #23843: avc: denied { block_suspend } for pid=34841 comm="msgr-worker-1" added
Actions
Copy link
 #15

Updated by Ken Dreyer almost 6 years ago

  • Related to deleted (Bug #23843: avc: denied { block_suspend } for pid=34841 comm="msgr-worker-1")
Actions
Copy link
 #16

Updated by Ken Dreyer almost 6 years ago

  • Has duplicate Bug #23843: avc: denied { block_suspend } for pid=34841 comm="msgr-worker-1" added
Actions
Copy link

Also available in: Atom PDF