Actions
Bug #22302
closedselinux denials with ceph-deploy/ceph-volume lvm device
% Done:
0%
Source:
Tags:
Backport:
luminous, mimic
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
Pull request ID:
Crash signature (v1):
Crash signature (v2):
Description
I see quite a few selinux denials with ceph-deploy using ceph-volume + lvm devices, this is a new test
2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.719:9791): avc: denied { read } for pid=15371 comm="ceph-osd" name="type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.719:9791): avc: denied { open } for pid=15371 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-0/type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9792): avc: denied { read } for pid=15371 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9793): avc: denied { read } for pid=15371 comm="ceph-osd" name="journal" dev="dm-1" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file 2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9794): avc: denied { write } for pid=15371 comm="ceph-osd" name="fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9795): avc: denied { lock } for pid=15371 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-0/fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9796): avc: denied { write } for pid=15371 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.282 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9797): avc: denied { add_name } for pid=15371 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9797): avc: denied { create } for pid=15371 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.729:9797): avc: denied { read write open } for pid=15371 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-0/fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.730:9798): avc: denied { remove_name } for pid=15371 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.730:9798): avc: denied { unlink } for pid=15371 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.730:9799): avc: denied { setattr } for pid=15371 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.730:9800): avc: denied { getattr } for pid=15371 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.731:9801): avc: denied { read } for pid=15371 comm="ceph-osd" name="current" dev="dm-1" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.731:9802): avc: denied { getattr } for pid=15371 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-0/current/omap/osd_uuid" dev="dm-1" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.732:9803): avc: denied { write } for pid=15371 comm="ceph-osd" name="omap" dev="dm-1" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.283 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.732:9803): avc: denied { add_name } for pid=15371 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.733:9804): avc: denied { remove_name } for pid=15371 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.733:9804): avc: denied { rename } for pid=15371 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.733:9804): avc: denied { unlink } for pid=15371 comm="ceph-osd" name="CURRENT" dev="dm-1" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173389.737:9805): avc: denied { setattr } for pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173395.822:9815): avc: denied { write } for pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173395.822:9815): avc: denied { add_name } for pid=15371 comm="tp_fstore_op" name="inc\uosdmap.6__0_B65F4796__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173395.822:9816): avc: denied { read } for pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173395.822:9817): avc: denied { setattr } for pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.592:9974): avc: denied { read } for pid=15797 comm="ceph-osd" name="type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.592:9974): avc: denied { open } for pid=15797 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-1/type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.603:9975): avc: denied { read } for pid=15797 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.284 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.603:9976): avc: denied { read } for pid=15797 comm="ceph-osd" name="journal" dev="dm-2" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9977): avc: denied { write } for pid=15797 comm="ceph-osd" name="fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9978): avc: denied { lock } for pid=15797 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-1/fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9979): avc: denied { write } for pid=15797 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9980): avc: denied { add_name } for pid=15797 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9980): avc: denied { create } for pid=15797 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9980): avc: denied { read write open } for pid=15797 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-1/fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9981): avc: denied { remove_name } for pid=15797 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.604:9981): avc: denied { unlink } for pid=15797 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.605:9982): avc: denied { setattr } for pid=15797 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.605:9983): avc: denied { getattr } for pid=15797 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.285 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.605:9984): avc: denied { getattr } for pid=15797 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-1/current/omap/osd_uuid" dev="dm-2" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.286 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.610:9985): avc: denied { remove_name } for pid=15797 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.286 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.610:9985): avc: denied { rename } for pid=15797 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173399.610:9985): avc: denied { unlink } for pid=15797 comm="ceph-osd" name="CURRENT" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.243:9998): avc: denied { write } for pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.243:9998): avc: denied { add_name } for pid=15371 comm="tp_fstore_op" name="inc\uosdmap.9__0_B65F4586__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.243:9998): avc: denied { create } for pid=15371 comm="tp_fstore_op" name="inc\uosdmap.9__0_B65F4586__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.244:9999): avc: denied { create } for pid=15797 comm="tp_fstore_op" name="inc\uosdmap.9__0_B65F4586__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.243:9998): avc: denied { read write open } for pid=15371 comm="tp_fstore_op" path="/var/lib/ceph/osd/ceph-0/current/meta/inc\uosdmap.9__0_B65F4586__none" dev="dm-1" ino=33577363 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.244:10000): avc: denied { read } for pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.288 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.244:10001): avc: denied { setattr } for pid=15371 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173402.244:10002): avc: denied { setattr } for pid=15797 comm="tp_fstore_op" name="inc\uosdmap.9__0_B65F4586__none" dev="dm-2" ino=33577363 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173429.269:10019): avc: denied { write } for pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173429.269:10019): avc: denied { add_name } for pid=15797 comm="tp_fstore_op" name="inc\uosdmap.18__0_F4E9DA83__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173429.269:10020): avc: denied { read } for pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173429.270:10021): avc: denied { setattr } for pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173450.115:10034): avc: denied { execute } for pid=16549 comm="sh" name="ldconfig" dev="sda1" ino=5201 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173450.115:10034): avc: denied { read open } for pid=16549 comm="sh" path="/usr/sbin/ldconfig" dev="sda1" ino=5201 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173450.115:10034): avc: denied { execute_no_trans } for pid=16549 comm="sh" path="/usr/sbin/ldconfig" dev="sda1" ino=5201 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:ldconfig_exec_t:s0 tclass=file 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.908:10044): avc: denied { create } for pid=15371 comm="tp_fstore_op" name="inc\uosdmap.26__0_F4E9DCD3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.908:10044): avc: denied { read write open } for pid=15371 comm="tp_fstore_op" path="/var/lib/ceph/osd/ceph-0/current/meta/inc\uosdmap.26__0_F4E9DCD3__none" dev="dm-1" ino=33577397 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.289 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.908:10045): avc: denied { setattr } for pid=15371 comm="tp_fstore_op" name="inc\uosdmap.26__0_F4E9DCD3__none" dev="dm-1" ino=33577397 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.290 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.909:10046): avc: denied { create } for pid=15371 comm="tp_fstore_op" name="1.11_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.911:10047): avc: denied { write } for pid=15371 comm="tp_fstore_op" name="1.11_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.911:10047): avc: denied { setattr } for pid=15371 comm="tp_fstore_op" name="1.11_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.911:10048): avc: denied { read } for pid=15371 comm="tp_fstore_op" name="1.11_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173454.913:10049): avc: denied { add_name } for pid=15371 comm="tp_fstore_op" name="__head_00000011__1" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173463.114:10063): avc: denied { getattr } for pid=15797 comm="tp_osd_tp" path="/var/lib/ceph/osd/ceph-1/current/meta/snapmapper__0_A468EC03__none" dev="dm-2" ino=33577346 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.294 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173466.153:10064): avc: denied { remove_name } for pid=15371 comm="tp_fstore_op" name="rbd\udata.108d2ae8944a.0000000000000000__head_C315240B__1" dev="dm-1" ino=50331756 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173466.153:10064): avc: denied { unlink } for pid=15371 comm="tp_fstore_op" name="rbd\udata.108d2ae8944a.0000000000000000__head_C315240B__1" dev="dm-1" ino=50331756 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173483.136:10067): avc: denied { write } for pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173483.136:10067): avc: denied { add_name } for pid=15797 comm="tp_fstore_op" name="inc\uosdmap.35__0_F4E9D7B3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173483.136:10068): avc: denied { read } for pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173483.137:10069): avc: denied { setattr } for pid=15797 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10167): avc: denied { write open } for pid=15797 comm="signal_handler" name="000009.log" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10168): avc: denied { getattr } for pid=15797 comm="signal_handler" path="/var/lib/ceph/osd/ceph-1/current/omap/000009.log" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10169): avc: denied { write open } for pid=15371 comm="signal_handler" name="000009.log" dev="dm-1" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.295 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10170): avc: denied { getattr } for pid=15797 comm="signal_handler" path="/var/lib/ceph/osd/ceph-1/current/omap/MANIFEST-000008" dev="dm-2" ino=16777259 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.296 INFO:teuthology.orchestra.run.smithi172.stdout:type=AVC msg=audit(1512173488.237:10171): avc: denied { lock } for pid=15797 comm="signal_handler" path="/var/lib/ceph/osd/ceph-1/current/omap/LOCK" dev="dm-2" ino=16777250 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.296 DEBUG:teuthology.task.selinux:ubuntu@smithi172.front.sepia.ceph.com has 79 denials 2017-12-02T00:12:28.296 INFO:teuthology.orchestra.run.smithi065:Running: 'sudo grep \'avc: .*denied\' /var/log/audit/audit.log | grep -v \'\\(comm="dmidecode"\\|chronyd.service\\|name="cephtest"\\|scontext=system_u:system_r:nrpe_t:s0\\|scontext=system_u:system_r:pcp_pmlogger_t\\|scontext=system_u:system_r:pcp_pmcd_t:s0\\)\'' 2017-12-02T00:12:28.386 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.132:9700): avc: denied { read } for pid=14256 comm="ceph-osd" name="type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.386 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.132:9700): avc: denied { open } for pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.386 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.150:9701): avc: denied { read } for pid=14256 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.150:9702): avc: denied { read } for pid=14256 comm="ceph-osd" name="journal" dev="dm-1" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file 2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9703): avc: denied { read write } for pid=14256 comm="ceph-osd" name="fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9703): avc: denied { open } for pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9704): avc: denied { lock } for pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9705): avc: denied { write } for pid=14256 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9706): avc: denied { add_name } for pid=14256 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.387 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9706): avc: denied { create } for pid=14256 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.151:9706): avc: denied { read write open } for pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.152:9707): avc: denied { remove_name } for pid=14256 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.152:9707): avc: denied { unlink } for pid=14256 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.152:9708): avc: denied { setattr } for pid=14256 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.152:9709): avc: denied { getattr } for pid=14256 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.153:9710): avc: denied { read } for pid=14256 comm="ceph-osd" name="current" dev="dm-1" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.153:9711): avc: denied { getattr } for pid=14256 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-4/current/omap/osd_uuid" dev="dm-1" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.155:9712): avc: denied { write } for pid=14256 comm="ceph-osd" name="omap" dev="dm-1" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.155:9712): avc: denied { add_name } for pid=14256 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.156:9713): avc: denied { remove_name } for pid=14256 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.388 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.156:9713): avc: denied { rename } for pid=14256 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.156:9713): avc: denied { unlink } for pid=14256 comm="ceph-osd" name="CURRENT" dev="dm-1" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173433.160:9714): avc: denied { setattr } for pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173434.775:9715): avc: denied { write } for pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173434.775:9715): avc: denied { add_name } for pid=14256 comm="tp_fstore_op" name="inc\uosdmap.1__0_B65F4306__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173434.775:9716): avc: denied { read } for pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173434.775:9717): avc: denied { setattr } for pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9773): avc: denied { write } for pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9773): avc: denied { add_name } for pid=14256 comm="tp_fstore_op" name="inc\uosdmap.22__0_F4E9D913__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9773): avc: denied { create } for pid=14256 comm="tp_fstore_op" name="inc\uosdmap.22__0_F4E9D913__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9773): avc: denied { read write open } for pid=14256 comm="tp_fstore_op" path="/var/lib/ceph/osd/ceph-4/current/meta/inc\uosdmap.22__0_F4E9D913__none" dev="dm-1" ino=33577389 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.389 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9774): avc: denied { read } for pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9775): avc: denied { setattr } for pid=14256 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173440.103:9776): avc: denied { setattr } for pid=14256 comm="tp_fstore_op" name="inc\uosdmap.22__0_F4E9D913__none" dev="dm-1" ino=33577389 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.907:9933): avc: denied { read } for pid=14704 comm="ceph-osd" name="type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.907:9933): avc: denied { open } for pid=14704 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-5/type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.920:9934): avc: denied { read } for pid=14704 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.920:9935): avc: denied { read } for pid=14704 comm="ceph-osd" name="journal" dev="dm-2" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9936): avc: denied { write } for pid=14704 comm="ceph-osd" name="fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9937): avc: denied { lock } for pid=14704 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-5/fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9938): avc: denied { write } for pid=14704 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.390 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9939): avc: denied { add_name } for pid=14704 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9939): avc: denied { create } for pid=14704 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.921:9939): avc: denied { read write open } for pid=14704 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-5/fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.922:9940): avc: denied { remove_name } for pid=14704 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.922:9940): avc: denied { unlink } for pid=14704 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.391 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.923:9941): avc: denied { setattr } for pid=14704 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.923:9942): avc: denied { getattr } for pid=14704 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.923:9943): avc: denied { read } for pid=14704 comm="ceph-osd" name="current" dev="dm-2" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.923:9944): avc: denied { getattr } for pid=14704 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-5/current/omap/osd_uuid" dev="dm-2" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.925:9945): avc: denied { write } for pid=14704 comm="ceph-osd" name="omap" dev="dm-2" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.925:9945): avc: denied { add_name } for pid=14704 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.927:9946): avc: denied { remove_name } for pid=14704 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.927:9946): avc: denied { rename } for pid=14704 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.927:9946): avc: denied { unlink } for pid=14704 comm="ceph-osd" name="CURRENT" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173443.934:9947): avc: denied { setattr } for pid=14704 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.898:10065): avc: denied { create } for pid=14704 comm="tp_fstore_op" name="1.1_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.392 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.899:10066): avc: denied { create } for pid=14256 comm="tp_fstore_op" name="1.4_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.900:10067): avc: denied { write } for pid=14256 comm="tp_fstore_op" name="1.4_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.900:10067): avc: denied { setattr } for pid=14256 comm="tp_fstore_op" name="1.4_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.900:10068): avc: denied { read } for pid=14256 comm="tp_fstore_op" name="1.4_head" dev="dm-1" ino=50331680 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173454.903:10069): avc: denied { add_name } for pid=14704 comm="tp_fstore_op" name="__head_00000001__1" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173463.102:10070): avc: denied { write } for pid=14704 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173463.102:10070): avc: denied { add_name } for pid=14704 comm="tp_fstore_op" name="inc\uosdmap.29__0_F4E9D2C3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173463.102:10071): avc: denied { read } for pid=14704 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173463.102:10072): avc: denied { setattr } for pid=14704 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173464.114:10073): avc: denied { write } for pid=14256 comm="tp_fstore_op" name="1.3a_head" dev="dm-1" ino=50331692 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.393 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173464.114:10073): avc: denied { add_name } for pid=14256 comm="tp_fstore_op" name="rbd\uinfo__head_AC0E573A__1" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.394 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173464.114:10074): avc: denied { read } for pid=14256 comm="tp_fstore_op" name="1.3a_head" dev="dm-1" ino=50331692 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.394 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173464.114:10075): avc: denied { setattr } for pid=14256 comm="tp_fstore_op" name="1.3a_head" dev="dm-1" ino=50331692 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.394 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173466.143:10076): avc: denied { remove_name } for pid=14256 comm="tp_fstore_op" name="rbd\udata.108d2ae8944a.0000000000000000__head_C315240B__1" dev="dm-1" ino=85 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.394 INFO:teuthology.orchestra.run.smithi065.stdout:type=AVC msg=audit(1512173483.120:10092): avc: denied { lock } for pid=14704 comm="signal_handler" path="/var/lib/ceph/osd/ceph-5/current/omap/LOCK" dev="dm-2" ino=16777250 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.395 DEBUG:teuthology.task.selinux:ubuntu@smithi065.front.sepia.ceph.com has 72 denials 2017-12-02T00:12:28.395 INFO:teuthology.orchestra.run.smithi169:Running: 'sudo grep \'avc: .*denied\' /var/log/audit/audit.log | grep -v \'\\(comm="dmidecode"\\|chronyd.service\\|name="cephtest"\\|scontext=system_u:system_r:nrpe_t:s0\\|scontext=system_u:system_r:pcp_pmlogger_t\\|scontext=system_u:system_r:pcp_pmcd_t:s0\\)\'' 2017-12-02T00:12:28.478 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.879:9700): avc: denied { read } for pid=13883 comm="ceph-osd" name="type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.478 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.879:9700): avc: denied { open } for pid=13883 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-2/type" dev="dm-1" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.478 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.889:9701): avc: denied { read } for pid=13883 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.478 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.889:9702): avc: denied { read } for pid=13883 comm="ceph-osd" name="journal" dev="dm-1" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file 2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9703): avc: denied { write } for pid=13883 comm="ceph-osd" name="fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9704): avc: denied { lock } for pid=13883 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-2/fsid" dev="dm-1" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9705): avc: denied { write } for pid=13883 comm="ceph-osd" name="/" dev="dm-1" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9706): avc: denied { add_name } for pid=13883 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.479 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9706): avc: denied { create } for pid=13883 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.890:9706): avc: denied { read write open } for pid=13883 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-2/fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9707): avc: denied { remove_name } for pid=13883 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9707): avc: denied { unlink } for pid=13883 comm="ceph-osd" name="fiemap_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9708): avc: denied { setattr } for pid=13883 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9709): avc: denied { getattr } for pid=13883 comm="ceph-osd" name="xattr_test" dev="dm-1" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9710): avc: denied { read } for pid=13883 comm="ceph-osd" name="current" dev="dm-1" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.891:9711): avc: denied { getattr } for pid=13883 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-2/current/omap/osd_uuid" dev="dm-1" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9712): avc: denied { write } for pid=13883 comm="ceph-osd" name="omap" dev="dm-1" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9712): avc: denied { add_name } for pid=13883 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.480 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9713): avc: denied { remove_name } for pid=13883 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9713): avc: denied { rename } for pid=13883 comm="ceph-osd" name="000008.dbtmp" dev="dm-1" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.893:9713): avc: denied { unlink } for pid=13883 comm="ceph-osd" name="CURRENT" dev="dm-1" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173410.895:9714): avc: denied { setattr } for pid=13883 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9770): avc: denied { write } for pid=13883 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9770): avc: denied { add_name } for pid=13883 comm="tp_fstore_op" name="inc\uosdmap.14__0_F4E9C7C3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9770): avc: denied { create } for pid=13883 comm="tp_fstore_op" name="inc\uosdmap.14__0_F4E9C7C3__none" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9770): avc: denied { read write open } for pid=13883 comm="tp_fstore_op" path="/var/lib/ceph/osd/ceph-2/current/meta/inc\uosdmap.14__0_F4E9C7C3__none" dev="dm-1" ino=33577373 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9771): avc: denied { read } for pid=13883 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9772): avc: denied { setattr } for pid=13883 comm="tp_fstore_op" name="meta" dev="dm-1" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173417.719:9773): avc: denied { setattr } for pid=13883 comm="tp_fstore_op" name="inc\uosdmap.14__0_F4E9C7C3__none" dev="dm-1" ino=33577373 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.481 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.669:9930): avc: denied { read } for pid=14380 comm="ceph-osd" name="type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.669:9930): avc: denied { open } for pid=14380 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-3/type" dev="dm-2" ino=42 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.678:9931): avc: denied { read } for pid=14380 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.678:9932): avc: denied { read } for pid=14380 comm="ceph-osd" name="journal" dev="dm-2" ino=35 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=lnk_file 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9933): avc: denied { write } for pid=14380 comm="ceph-osd" name="fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9934): avc: denied { lock } for pid=14380 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-3/fsid" dev="dm-2" ino=37 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9935): avc: denied { write } for pid=14380 comm="ceph-osd" name="/" dev="dm-2" ino=32 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9936): avc: denied { add_name } for pid=14380 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9936): avc: denied { create } for pid=14380 comm="ceph-osd" name="fiemap_test" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9936): avc: denied { read write open } for pid=14380 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-3/fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9937): avc: denied { remove_name } for pid=14380 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.482 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.679:9937): avc: denied { unlink } for pid=14380 comm="ceph-osd" name="fiemap_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.680:9938): avc: denied { setattr } for pid=14380 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.680:9939): avc: denied { getattr } for pid=14380 comm="ceph-osd" name="xattr_test" dev="dm-2" ino=49 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.681:9940): avc: denied { read } for pid=14380 comm="ceph-osd" name="current" dev="dm-2" ino=40 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.681:9941): avc: denied { getattr } for pid=14380 comm="ceph-osd" path="/var/lib/ceph/osd/ceph-3/current/omap/osd_uuid" dev="dm-2" ino=16777256 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.682:9942): avc: denied { write } for pid=14380 comm="ceph-osd" name="omap" dev="dm-2" ino=16777248 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.682:9942): avc: denied { add_name } for pid=14380 comm="ceph-osd" name="000007.sst" scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.684:9943): avc: denied { remove_name } for pid=14380 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.684:9943): avc: denied { rename } for pid=14380 comm="ceph-osd" name="000008.dbtmp" dev="dm-2" ino=16777260 scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.684:9943): avc: denied { unlink } for pid=14380 comm="ceph-osd" name="CURRENT" dev="dm-2" ino=16777258 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=file 2017-12-02T00:12:28.483 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173421.692:9944): avc: denied { setattr } for pid=14380 comm="tp_fstore_op" name="meta" dev="dm-2" ino=33577344 scontext=system_u:system_r:ceph_t:s0 tcontext=unconfined_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.484 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173454.906:9956): avc: denied { create } for pid=13883 comm="tp_fstore_op" name="1.2_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.484 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173454.906:9957): avc: denied { create } for pid=14380 comm="tp_fstore_op" name="1.0_head" scontext=system_u:system_r:ceph_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir 2017-12-02T00:12:28.484 INFO:teuthology.orchestra.run.smithi169.stdout:type=AVC msg=audit(1512173454.907:9958): avc: denied { write } for pid=14380 comm="tp_fstore_op" name="1.0_head" dev="dm-2" ino=50331680 scontext=system_u:system_r:ceph_t:s0
Updated by Alfredo Deza over 6 years ago
- Project changed from devops to ceph-volume
- Status changed from New to 12
- Assignee deleted (
Boris Ranto)
ceph-volume isn't fully doing the restorecon dance yet.
Updated by Alfredo Deza over 6 years ago
- Project changed from ceph-volume to Ceph
- Assignee changed from Alfredo Deza to Boris Ranto
Boris we need a bit of help here, unsure how to go around these. I believe Ken mentioned this is just a matter of defining the rules? Let me know if I can help.
Updated by Alfredo Deza about 6 years ago
- Assignee changed from Boris Ranto to Alfredo Deza
Updated by Boris Ranto about 6 years ago
The ldconfig part should be fixed by updating the SELinux policy:
https://github.com/ceph/ceph/pull/20118
The rest of the denials should be fixed by running restorecon on the root of the mounted file system after the mount.
Updated by Nathan Cutler about 6 years ago
- Status changed from 12 to Fix Under Review
Updated by Kefu Chai almost 6 years ago
- Status changed from Fix Under Review to Pending Backport
- Backport changed from luminous to luminous, mimic
Updated by Kefu Chai almost 6 years ago
- Copied to Backport #24113: mimic: selinux denials with ceph-deploy/ceph-volume lvm device added
Updated by Nathan Cutler almost 6 years ago
- Assignee changed from Alfredo Deza to Boris Ranto
Updated by Nathan Cutler almost 6 years ago
- Copied to Backport #24122: luminous: selinux denials with ceph-deploy/ceph-volume lvm device added
Updated by Kefu Chai almost 6 years ago
- Status changed from Pending Backport to Resolved
Updated by Ken Dreyer almost 6 years ago
- Related to Bug #23843: avc: denied { block_suspend } for pid=34841 comm="msgr-worker-1" added
Updated by Ken Dreyer almost 6 years ago
- Related to deleted (Bug #23843: avc: denied { block_suspend } for pid=34841 comm="msgr-worker-1")
Updated by Ken Dreyer almost 6 years ago
- Has duplicate Bug #23843: avc: denied { block_suspend } for pid=34841 comm="msgr-worker-1" added
Actions