Project

General

Profile

Bug #49717

"SELinux denials found" in upgrade:luminous-x-nautilus-distro-basic-gibba

Added by Yuri Weinstein about 3 years ago.

Status:
New
Priority:
Urgent
Assignee:
-
Category:
-
Target version:
-
% Done:

0%

Source:
Q/A
Tags:
Backport:
Regression:
No
Severity:
3 - minor
Reviewed:
Affected Versions:
ceph-qa-suite:
upgrade/hammer-kraken-x
Pull request ID:
Crash signature (v1):
Crash signature (v2):

Description

This is for 14.2.17 release

Run: https://pulpito.ceph.com/teuthology-2021-03-10_00:07:04-upgrade:luminous-x-nautilus-distro-basic-gibba/
Jos: '5951264', '5951252', '5951248'
Logs: /a/teuthology-2021-03-10_00:07:04-upgrade:luminous-x-nautilus-distro-basic-gibba/5951248/teuthology.log

Failure: SELinux denials found on ubuntu@gibba006.front.sepia.ceph.com: ['type=AVC msg=audit(1615371444.456:8400): avc:  denied  { getattr } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615378344.451:10970): avc:  denied  { getattr } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615375344.477:10117): avc:  denied  { read } for  pid=30173 comm="ntpd" name="if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372944.450:10052): avc:  denied  { read } for  pid=30173 comm="ntpd" name="if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615380001.162:12440): avc:  denied  { read } for  pid=77383 comm="sadc" name="dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372802.160:10025): avc:  denied  { getattr } for  pid=60640 comm="sadc" path="/proc/60640/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615382544.480:18256): avc:  denied  { getattr } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615382544.480:18255): avc:  denied  { open } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615371444.455:8399): avc:  denied  { read } for  pid=30173 comm="ntpd" name="if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615383001.368:19269): avc:  denied  { read } for  pid=126378 comm="sadc" name="dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615383001.368:19270): avc:  denied  { getattr } for  pid=126378 comm="sadc" path="/proc/126378/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615384344.505:22333): avc:  denied  { getattr } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615373401.408:10059): avc:  denied  { open } for  pid=60834 comm="sadc" path="/proc/60834/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615384344.504:22332): avc:  denied  { open } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615380001.163:12441): avc:  denied  { getattr } for  pid=77383 comm="sadc" path="/proc/77383/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615380001.162:12440): avc:  denied  { open } for  pid=77383 comm="sadc" path="/proc/77383/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615375344.477:10118): avc:  denied  { getattr } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615376401.631:10920): avc:  denied  { getattr } for  pid=66824 comm="sadc" path="/proc/66824/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615378344.451:10969): avc:  denied  { read } for  pid=30173 comm="ntpd" name="if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372944.450:10053): avc:  denied  { getattr } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615373401.409:10060): avc:  denied  { getattr } for  pid=60834 comm="sadc" path="/proc/60834/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615382544.480:18255): avc:  denied  { read } for  pid=30173 comm="ntpd" name="if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615371444.455:8399): avc:  denied  { open } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372802.160:10024): avc:  denied  { open } for  pid=60640 comm="sadc" path="/proc/60640/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372344.481:10017): avc:  denied  { read } for  pid=30173 comm="ntpd" name="if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615375344.477:10117): avc:  denied  { open } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615376401.630:10919): avc:  denied  { read } for  pid=66824 comm="sadc" name="dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372802.160:10024): avc:  denied  { read } for  pid=60640 comm="sadc" name="dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615371601.609:8933): avc:  denied  { read } for  pid=50577 comm="sadc" name="dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372344.482:10018): avc:  denied  { getattr } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615371601.609:8933): avc:  denied  { open } for  pid=50577 comm="sadc" path="/proc/50577/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615383001.368:19269): avc:  denied  { open } for  pid=126378 comm="sadc" path="/proc/126378/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615378344.451:10969): avc:  denied  { open } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372344.481:10017): avc:  denied  { open } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615371601.610:8934): avc:  denied  { getattr } for  pid=50577 comm="sadc" path="/proc/50577/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615376401.630:10919): avc:  denied  { open } for  pid=66824 comm="sadc" path="/proc/66824/net/dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615372944.450:10052): avc:  denied  { open } for  pid=30173 comm="ntpd" path="/proc/30173/net/if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615373401.408:10059): avc:  denied  { read } for  pid=60834 comm="sadc" name="dev" dev="proc" ino=4026531982 scontext=system_u:system_r:sysstat_t:s0-s0:c0.c1023 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1', 'type=AVC msg=audit(1615384344.504:22332): avc:  denied  { read } for  pid=30173 comm="ntpd" name="if_inet6" dev="proc" ino=4026532164 scontext=system_u:system_r:ntpd_t:s0 tcontext=system_u:object_r:devtty_t:s0 tclass=file permissive=1']

Also available in: Atom PDF