Project

General

Profile

Actions

Bug #16575

closed

SELinux denials found on ubuntu

Added by Kefu Chai almost 8 years ago. Updated almost 8 years ago.

Status:
Resolved
Priority:
Normal
Assignee:
Category:
-
Target version:
-
% Done:

0%

Source:
Q/A
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

see http://pulpito.ceph.com/kchai-2016-07-02_10:05:25-rados-wip-cmake-rpm---basic-mira/. all failed tests were due to SELinux denial.

SELinux denials found on : ['type=AVC msg=audit(1467482991.527:3645): avc: denied { read write open } for pid=21817 comm="ceph-osd" path="/dev/shm/lttng-ust-wait-5" dev="tmpfs" ino=76350 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467482992.740:3705): avc: denied { open } for pid=21998 comm="ceph-mon" path="/dev/shm/lttng-ust-wait-5" dev="tmpfs" ino=76350 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467482992.740:3705): avc: denied { read } for pid=21998 comm="ceph-mon" name="lttng-ust-wait-5" dev="tmpfs" ino=76350 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467482991.527:3645): avc: denied { add_name } for pid=21817 comm="ceph-osd" name="lttng-ust-wait-5" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir', 'type=AVC msg=audit(1467482991.527:3645): avc: denied { write } for pid=21817 comm="ceph-osd" name="/" dev="tmpfs" ino=10244 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir', 'type=AVC msg=audit(1467482991.527:3645): avc: denied { create } for pid=21817 comm="ceph-osd" name="lttng-ust-wait-5" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file']

SELinux denials found on : ['type=AVC msg=audit(1467490143.999:37230): avc: denied { open } for pid=2647 comm="ceph-osd" path="/dev/shm/lttng-ust-wait-5" dev="tmpfs" ino=608368 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467490143.999:37230): avc: denied { read } for pid=2647 comm="ceph-osd" name="lttng-ust-wait-5" dev="tmpfs" ino=608368 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467490143.999:37229): avc: denied { read } for pid=2646 comm="ceph-osd" name="lttng-ust-wait-5" dev="tmpfs" ino=608368 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467490143.151:37204): avc: denied { add_name } for pid=2558 comm="ceph-osd" name="lttng-ust-wait-5" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir', 'type=AVC msg=audit(1467490143.151:37204): avc: denied { read write open } for pid=2558 comm="ceph-osd" path="/dev/shm/lttng-ust-wait-5" dev="tmpfs" ino=608368 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467490143.151:37204): avc: denied { write } for pid=2558 comm="ceph-osd" name="/" dev="tmpfs" ino=9220 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=dir', 'type=AVC msg=audit(1467490143.999:37229): avc: denied { open } for pid=2646 comm="ceph-osd" path="/dev/shm/lttng-ust-wait-5" dev="tmpfs" ino=608368 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467490143.151:37204): avc: denied { create } for pid=2558 comm="ceph-osd" name="lttng-ust-wait-5" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file']

SELinux denials found on : ['type=AVC msg=audit(1467487776.044:93994): avc: denied { open } for pid=24787 comm="ceph-osd" path="/dev/shm/lttng-ust-wait-5" dev="tmpfs" ino=833444 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file', 'type=AVC msg=audit(1467487776.044:93994): avc: denied { read } for pid=24787 comm="ceph-osd" name="lttng-ust-wait-5" dev="tmpfs" ino=833444 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=file']

Actions #1

Updated by Kefu Chai almost 8 years ago

  • Project changed from rbd to Ceph
Actions #2

Updated by Kefu Chai almost 8 years ago

  • Status changed from New to Resolved
  • Assignee set to Kefu Chai
Actions

Also available in: Atom PDF