Status Job ID Links Posted Started Updated
Runtime
Duration
In Waiting
Machine Teuthology Branch OS Type OS Version Description Nodes
pass 5969984 2021-03-16 05:26:56 2021-03-16 10:02:54 2021-03-16 10:47:50 0:44:56 0:39:19 0:05:37 smithi master rhel 8.3 rados:cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/classic start} 2
pass 5969985 2021-03-16 05:26:57 2021-03-16 10:02:54 2021-03-16 10:28:09 0:25:15 0:16:33 0:08:42 smithi master ubuntu 20.04 rados:cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/connectivity task/test_cephadm} 1
pass 5969986 2021-03-16 05:26:58 2021-03-16 10:02:54 2021-03-16 10:50:22 0:47:28 0:36:50 0:10:38 smithi master ubuntu 20.04 rados:cephadm/with-work/{0-distro/ubuntu_20.04_kubic_testing fixed-2 mode/root mon_election/connectivity msgr/async-v1only start tasks/rados_api_tests} 2
fail 5969987 2021-03-16 05:26:59 2021-03-16 10:02:55 2021-03-16 10:26:47 0:23:52 0:13:12 0:10:40 smithi master ubuntu 20.04 rados:cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_testing task/test_e2e} 2
Failure Reason:

Command failed (workunit test cephadm/create_iscsi_disks.sh) on smithi095 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && cd -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=087e4d3ce254d47d802042553efd1f0d0fcdbcb3 TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="1" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.1 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.1 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.1/qa/workunits/cephadm/create_iscsi_disks.sh'

pass 5969988 2021-03-16 05:27:00 2021-03-16 10:03:25 2021-03-16 10:30:11 0:26:46 0:14:58 0:11:48 smithi master ubuntu 18.04 rados:cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/connectivity start} 2
pass 5969989 2021-03-16 05:27:02 2021-03-16 10:03:55 2021-03-16 10:34:07 0:30:12 0:19:18 0:10:54 smithi master ubuntu 20.04 rados:cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_stable} 2
pass 5969990 2021-03-16 05:27:03 2021-03-16 10:04:16 2021-03-16 11:10:17 1:06:01 0:56:01 0:10:00 smithi master centos 8.2 rados:cephadm/thrash/{0-distro/centos_8.2_kubic_stable 1-start 2-thrash 3-tasks/snaps-few-objects fixed-2 msgr/async-v1only root} 2
pass 5969991 2021-03-16 05:27:04 2021-03-16 10:05:06 2021-03-16 10:33:38 0:28:32 0:16:42 0:11:50 smithi master ubuntu 20.04 rados:cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/classic start} 2
pass 5969992 2021-03-16 05:27:05 2021-03-16 10:05:26 2021-03-16 10:41:17 0:35:51 0:24:37 0:11:14 smithi master ubuntu 20.04 rados:cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/connectivity} 2
pass 5969993 2021-03-16 05:27:06 2021-03-16 10:05:47 2021-03-16 11:11:32 1:05:45 0:56:08 0:09:37 smithi master centos 8.2 rados:cephadm/with-work/{0-distro/centos_8.2_kubic_stable fixed-2 mode/packaged mon_election/connectivity msgr/async-v1only start tasks/rados_api_tests} 2
dead 5969994 2021-03-16 05:27:07 2021-03-16 10:06:37 2021-03-16 10:16:24 0:09:47 smithi master centos 8.2 rados:cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/classic task/test_cephadm_repos} 1
pass 5969995 2021-03-16 05:27:08 2021-03-16 10:07:17 2021-03-16 10:35:16 0:27:59 0:16:03 0:11:56 smithi master ubuntu 20.04 rados:cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/connectivity start} 2
pass 5969996 2021-03-16 05:27:09 2021-03-16 10:07:37 2021-03-16 10:38:52 0:31:15 0:20:20 0:10:55 smithi master ubuntu 20.04 rados:cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_testing} 2
pass 5969997 2021-03-16 05:27:10 2021-03-16 10:07:58 2021-03-16 10:56:59 0:49:01 0:36:59 0:12:02 smithi master ubuntu 20.04 rados:cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/rados_api_tests fixed-2 msgr/async-v2only root} 2
pass 5969998 2021-03-16 05:27:11 2021-03-16 10:09:28 2021-03-16 10:36:22 0:26:54 0:15:43 0:11:11 smithi master ubuntu 20.04 rados:cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/classic start} 2
pass 5969999 2021-03-16 05:27:12 2021-03-16 10:10:38 2021-03-16 11:08:50 0:58:12 0:50:33 0:07:39 smithi master rhel 8.3 rados:cephadm/with-work/{0-distro/rhel_8.3_kubic_stable fixed-2 mode/root mon_election/classic msgr/async-v2only start tasks/rados_python} 2
pass 5970000 2021-03-16 05:27:13 2021-03-16 10:11:49 2021-03-16 10:42:09 0:30:20 0:20:18 0:10:02 smithi master ubuntu 20.04 rados:cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/connectivity task/test_orch_cli} 1
fail 5970001 2021-03-16 05:27:14 2021-03-16 10:11:59 2021-03-16 10:47:00 0:35:01 0:25:26 0:09:35 smithi master centos 8.2 rados:cephadm/dashboard/{0-distro/centos_8.2_kubic_stable task/test_e2e} 2
Failure Reason:

Command failed (workunit test cephadm/test_dashboard_e2e.sh) on smithi037 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && cd -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=087e4d3ce254d47d802042553efd1f0d0fcdbcb3 TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="0" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.0 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.0 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.0/qa/workunits/cephadm/test_dashboard_e2e.sh'

pass 5970002 2021-03-16 05:27:15 2021-03-16 10:12:09 2021-03-16 10:36:10 0:24:01 0:13:13 0:10:48 smithi master ubuntu 20.04 rados:cephadm/orchestrator_cli/{2-node-mgr orchestrator_cli random-distro$/{ubuntu_20.04_kubic_testing}} 2
pass 5970003 2021-03-16 05:27:16 2021-03-16 10:12:20 2021-03-16 10:55:34 0:43:14 0:33:30 0:09:44 smithi master centos 8.2 rados:cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/classic start} 2
fail 5970004 2021-03-16 05:27:17 2021-03-16 10:12:30 2021-03-16 11:45:46 1:33:16 1:23:00 0:10:16 smithi master centos 8.2 rados:cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/centos_8.2_kubic_stable} 2
Failure Reason:

SELinux denials found on ubuntu@smithi016.front.sepia.ceph.com: ['type=AVC msg=audit(1615890978.405:6900): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891052.801:7359): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.803:8116): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.811:8396): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.130:7256): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.146:7581): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890932.801:6759): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.566:6553): avc: denied { append } for pid=41794 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.405:6900): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891240.060:8307): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891270.592:8454): avc: denied { getattr } for pid=97683 comm="pgrep" path="/proc/25083" dev="proc" ino=139122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.802:7682): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7298): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.820:7250): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.800:7075): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8775): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.800:6754): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.550:8011): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="socket:[270614]" dev="sockfs" ino=270614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8440): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.055:8282): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6611): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.361:8050): avc: denied { read } for pid=76932 comm="msgr-worker-0" path="pipe:[271749]" dev="pipefs" ino=271749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.122:8614): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.494:7265): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.636:6555): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.804:7686): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6765): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7078): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.700:7216): avc: denied { append } for pid=41794 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8386): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.146:7582): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.074:6893): avc: denied { read } for pid=41794 comm="msgr-worker-0" path="pipe:[181664]" dev="pipefs" ino=181664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890984.007:7021): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.590:8621): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891304.074:8592): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891057.129:7401): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891179.590:8013): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.801:6597): avc: denied { read } for pid=34046 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.136:6572): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7007): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.781:7039): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891304.074:8590): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.020:7273): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8687): avc: denied { read } for pid=34046 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.998:6742): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:7001): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.800:6595): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8685): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.341:8747): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.002:6562): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.804:7687): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:6995): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.367:6698): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.802:7931): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890928.369:6734): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890915.149:6662): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.613:8799): avc: denied { search } for pid=100796 comm="pgrep" name="25060" dev="proc" ino=127083 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.803:8432): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.315:8619): avc: denied { open } for pid=41794 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8779): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6767): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891245.591:8363): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.998:6739): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:6997): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6917): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:7001): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.801:8108): avc: denied { read } for pid=34046 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7228): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.591:7399): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.591:7103): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7230): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891244.056:8361): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.801:7430): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.811:7732): avc: denied { getattr } for pid=41218 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=177672 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8668): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.020:7276): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.042:7963): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.811:6577): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.811:8095): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[329700]" dev="sockfs" ino=329700 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.801:6600): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890983.499:7018): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.307:8581): avc: denied { read } for pid=41794 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.517:7716): avc: denied { getattr } for pid=25452 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8336): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.255:6724): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.591:8388): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.267:8575): avc: denied { search } for pid=25452 comm="safe_timer" name="diff" dev="sda1" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.801:7757): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.520:8055): avc: denied { search } for pid=25452 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.591:6591): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.577:6707): avc: denied { read } for pid=75936 comm="msgr-worker-1" path="pipe:[267145]" dev="pipefs" ino=267145 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.229:8377): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.802:7681): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891057.129:7403): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.801:7431): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8693): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891182.801:8034): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891050.377:7346): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8087): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891107.799:7560): avc: denied { write } for pid=52504 comm="tp_osd_tp" path="pipe:[207671]" dev="pipefs" ino=207671 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7761): avc: denied { read } for pid=34046 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8683): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.228:7658): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.131:7259): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.591:7299): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7432): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.801:6600): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891270.592:8455): avc: denied { open } for pid=97683 comm="pgrep" path="/proc/25083/status" dev="proc" ino=139152 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891310.695:8663): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890913.995:6641): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.801:8779): avc: denied { read } for pid=34046 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7759): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.307:8581): avc: denied { open } for pid=41794 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7076): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.800:8331): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.255:6723): avc: denied { search } for pid=40550 comm="grafana-server" name="var" dev="sda1" ino=1968519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.136:6570): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.811:7061): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[299777]" dev="sockfs" ino=299777 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.057:8444): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891313.133:8705): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.031:7578): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8691): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.716:6709): avc: denied { search } for pid=52504 comm="safe_timer" name="diff" dev="sda1" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891045.021:7303): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.487:6942): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891311.591:8667): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8323): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.145:7998): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.803:6615): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8416): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.591:7104): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.523:8314): avc: denied { search } for pid=25452 comm="mgr-fin" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891241.811:8324): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.923:7563): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8683): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.802:8427): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.154:8246): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.994:8641): avc: denied { write } for pid=25083 comm="msgr-worker-2" laddr=172.21.15.16 lport=3300 faddr=172.21.15.188 fport=33678 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891313.316:8707): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8346): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7925): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8415): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.578:7897): avc: denied { search } for pid=25452 comm="safe_timer" name="diff" dev="sda1" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890993.591:7105): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891186.661:8077): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7093): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.804:7777): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.591:8625): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.578:7898): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.361:8051): avc: denied { write } for pid=76932 comm="msgr-worker-0" laddr=172.21.15.16 lport=49336 faddr=172.21.15.16 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:6999): avc: denied { read } for pid=34046 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891307.255:8653): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.804:8796): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:7000): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.377:8085): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.146:7580): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.802:6609): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.382:7066): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891054.393:7372): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.555:6908): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.802:6607): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=34825 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.811:8760): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.800:8772): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8320): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7920): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.145:7697): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.142:7969): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.802:7769): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.138:8069): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.590:6728): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891057.129:7403): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891333.414:8812): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891047.255:7338): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.494:6541): avc: denied { search } for pid=81738 comm="pgrep" name="25060" dev="proc" ino=127083 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.031:7577): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8094): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=50440 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8670): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891308.591:8657): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.602:7976): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891244.056:8361): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.636:6555): avc: denied { open } for pid=52504 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.804:7776): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.151:7722): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.811:6579): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.142:7967): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.646:7645): avc: denied { search } for pid=33236 comm="ceph-crash" name="crash" dev="dm-4" ino=16777344 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890994.009:7107): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.591:6731): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.804:8117): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.138:8732): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890979.006:6918): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.591:7342): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.210:7611): avc: denied { read } for pid=41794 comm="msgr-worker-2" path="socket:[237791]" dev="sockfs" ino=237791 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.494:6540): avc: denied { getattr } for pid=81738 comm="pgrep" path="/proc/25060" dev="proc" ino=127083 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.801:6597): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7446): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7442): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.800:7222): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.590:8283): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.361:8052): avc: denied { read } for pid=25083 comm="msgr-worker-1" path="socket:[270773]" dev="sockfs" ino=270773 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.590:6586): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890990.781:7038): avc: denied { search } for pid=57983 comm="safe_timer" name="diff" dev="sda1" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890984.007:7023): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7671): avc: denied { read } for pid=34046 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.590:7975): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.149:7637): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.002:6564): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890991.536:7051): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7238): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.146:7582): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.360:8049): avc: denied { write } for pid=76932 comm="safe_timer" path="pipe:[271749]" dev="pipefs" ino=271749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8442): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:7003): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8096): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[334536]" dev="sockfs" ino=334536 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.928:8239): avc: denied { read } for pid=52504 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8105): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.255:7337): avc: denied { search } for pid=40550 comm="grafana-server" name="var" dev="sda1" ino=1968519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.155:8248): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.240:7695): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890984.007:7020): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890928.998:6739): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.801:7084): avc: denied { read } for pid=34046 comm="node_exporter" name="eno1" dev="sysfs" ino=34629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6745): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7923): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.987:8723): avc: denied { read } for pid=57983 comm="msgr-worker-2" path="pipe:[220905]" dev="pipefs" ino=220905 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.590:6910): avc: denied { search } for pid=40550 comm="grafana-server" name="dashboards" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.802:6610): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.804:8435): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.804:7775): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8327): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[341338]" dev="sockfs" ino=341338 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891313.316:8710): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.801:7085): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.802:7770): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7235): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.149:6663): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.382:7066): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.802:7768): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891046.394:7328): avc: denied { write } for pid=41794 comm="msgr-worker-2" laddr=172.21.15.16 lport=43184 faddr=172.21.15.16 fport=6816 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891304.074:8590): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.032:7780): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891189.045:8082): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.876:7934): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.149:7638): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.590:8748): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7664): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7235): avc: denied { read } for pid=34046 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.523:8314): avc: denied { search } for pid=25452 comm="mgr-fin" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.578:7898): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.801:8104): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.811:6979): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.972:8317): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.590:8056): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.803:8431): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7006): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.602:7977): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890932.805:6774): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7226): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.555:6909): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891319.077:8753): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891320.377:8758): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.367:6726): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.508:6964): avc: denied { search } for pid=25452 comm="mgr-fin" name="diff" dev="sda1" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.138:8734): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891056.591:7399): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.803:8116): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.267:8575): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.475:6940): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:7001): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.042:7963): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.803:8357): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.591:7940): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.122:8614): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7911): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.057:8444): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.591:8062): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="sda1" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.811:8400): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[340855]" dev="sockfs" ino=340855 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891333.414:8813): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.153:8405): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.801:8682): avc: denied { read } for pid=34046 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.987:8720): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.161:6664): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.149:6661): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.800:8331): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.745:7557): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7244): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.803:7774): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.155:8247): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.801:8347): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.006:6918): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890984.007:7020): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.700:7218): avc: denied { write } for pid=41794 comm="msgr-worker-2" laddr=172.21.15.16 lport=6806 faddr=172.21.15.188 fport=37530 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8778): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8384): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.800:7662): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.805:7690): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/platform/coretemp.0" dev="sysfs" ino=48061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.804:6773): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.591:8005): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.961:7992): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.020:7274): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.801:6687): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.811:7351): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891309.562:8661): avc: denied { read } for pid=75936 comm="msgr-worker-0" path="pipe:[267144]" dev="pipefs" ino=267144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6767): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890981.811:6976): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.803:7015): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.801:8693): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.801:8101): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.136:6571): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.382:7066): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7926): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.276:7743): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891059.022:7411): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891110.210:7612): avc: denied { read } for pid=47110 comm="msgr-worker-1" path="socket:[233886]" dev="sockfs" ino=233886 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.800:6988): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.802:7927): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.998:6740): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.802:6766): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891332.802:8804): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.405:6900): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890910.494:6541): avc: denied { read } for pid=81738 comm="pgrep" name="status" dev="proc" ino=127087 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.802:7929): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.923:7563): avc: denied { open } for pid=52504 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891313.316:8708): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.811:8762): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6917): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="sda1" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.146:7582): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.212:8080): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7227): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.811:8019): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.802:6690): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.804:7689): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/platform/coretemp.0" dev="sysfs" ino=48061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8672): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.151:7724): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.801:8419): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.801:6600): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8337): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.018:7390): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8575): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.138:8734): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890921.591:6676): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7765): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6749): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.803:7013): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.923:7563): avc: denied { search } for pid=52504 comm="safe_timer" name="diff" dev="sda1" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.811:6577): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.804:7778): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.803:7249): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891195.679:8123): avc: denied { read } for pid=41218 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.032:7693): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.802:7445): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.802:8428): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.803:7014): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891042.801:7227): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891046.892:7330): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.142:7968): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891051.811:7350): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891307.125:8648): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.635:7698): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.803:6695): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.032:7693): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890928.998:6739): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.471:8584): avc: denied { search } for pid=52504 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.800:7224): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891113.204:7692): avc: denied { read } for pid=41794 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.781:7038): avc: denied { open } for pid=57983 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891311.130:8664): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890914.350:6655): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.253:8573): avc: denied { write } for pid=41794 comm="msgr-worker-2" laddr=172.21.15.16 lport=6802 faddr=172.21.15.188 fport=57772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891057.129:7401): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891244.153:8362): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890993.591:7105): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.591:8286): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.801:7760): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891237.928:8239): avc: denied { open } for pid=52504 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.453:6705): avc: denied { append } for pid=25452 comm="log" path="/var/log/ceph/ceph-mgr.smithi016.leovdj.log" dev="sda1" ino=396134 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7238): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.800:6988): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.716:6710): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.811:7055): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.811:6577): avc: denied { getattr } for pid=41218 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=177672 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891237.928:8240): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891320.666:8759): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.002:6564): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.591:6587): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891119.033:7703): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.487:6970): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890916.362:6666): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890914.357:6656): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891319.077:8753): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.515:8054): avc: denied { open } for pid=47110 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7434): avc: denied { read } for pid=34046 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.590:7975): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8089): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.253:8566): avc: denied { read } for pid=57983 comm="msgr-worker-2" path="socket:[271399]" dev="sockfs" ino=271399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:6991): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7239): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.581:6965): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.779:7037): avc: denied { append } for pid=41794 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8694): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6616): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.240:7696): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8342): avc: denied { read } for pid=34046 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890930.377:6743): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.142:7969): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.803:8357): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.803:8431): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.811:8769): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[358062]" dev="sockfs" ino=358062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7440): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8106): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.754:8390): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.811:7349): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.151:7724): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.811:7736): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.590:8012): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.801:8422): avc: denied { read } for pid=34046 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8782): avc: denied { read } for pid=34046 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.382:7066): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891110.591:7627): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891176.591:8003): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7445): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.801:7076): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6734): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.948:8275): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.679:8448): avc: denied { open } for pid=41218 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8387): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.122:8614): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.752:8045): avc: denied { write } for pid=41794 comm="tp_osd_tp" path="pipe:[181665]" dev="pipefs" ino=181665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:6992): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.716:6709): avc: denied { read } for pid=52504 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.803:7011): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8389): avc: denied { read } for pid=40550 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890990.945:7047): avc: denied { write } for pid=25083 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890915.161:6665): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.131:7259): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890981.591:6974): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.212:8009): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891315.679:8715): avc: denied { open } for pid=41218 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.804:7683): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.803:7013): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.800:8029): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8387): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.683:8235): avc: denied { append } for pid=47110 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396209 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.811:8022): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891107.923:7564): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.591:8751): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574984 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6768): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.803:7090): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890927.255:6722): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.153:8405): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.555:6909): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.801:6597): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.636:6556): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7766): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890918.996:6670): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7648): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.379:6986): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891056.590:7394): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.057:8444): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.591:8624): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.800:7754): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.487:6942): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.372:6702): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.499:6972): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891308.590:8655): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.801:8343): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7225): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890921.591:6675): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891110.591:7631): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.919:8304): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.802:7247): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.408:7712): avc: denied { read } for pid=25452 comm="msgr-worker-2" path="socket:[227548]" dev="sockfs" ino=227548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.255:8742): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.136:6571): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.800:8028): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8687): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.811:6578): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7009): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.800:7223): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6605): avc: denied { read } for pid=34046 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.591:7342): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.948:8274): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.591:8004): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891173.591:7943): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.155:8249): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891110.591:7631): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.801:7676): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891175.001:7993): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.122:8613): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891061.811:7419): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.812:8401): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7299): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.802:8351): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6759): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.474:8313): avc: denied { append } for pid=25452 comm="log" path="/var/log/ceph/ceph-mgr.smithi016.leovdj.log" dev="sda1" ino=396134 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.590:7938): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.811:8398): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=34871 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7092): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.253:8568): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.646:7644): avc: denied { getattr } for pid=33236 comm="ceph-crash" path="/var/lib/ceph/crash" dev="dm-4" ino=16777344 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8061): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6748): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8694): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7234): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.329:8744): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7225): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.031:7576): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.803:6691): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.673:8079): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.229:8373): avc: denied { write } for pid=75936 comm="msgr-worker-1" laddr=172.21.15.16 lport=59418 faddr=172.21.15.16 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.811:8019): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7232): avc: denied { read } for pid=34046 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.811:7932): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8421): avc: denied { read } for pid=34046 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891316.136:8725): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.043:7966): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.522:8367): avc: denied { read } for pid=57983 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890994.009:7108): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7079): avc: denied { read } for pid=34046 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.590:7394): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.804:6772): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.928:8240): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.919:8304): avc: denied { search } for pid=52504 comm="safe_timer" name="diff" dev="sda1" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891186.139:8070): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.801:6683): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891309.075:8658): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.800:6755): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.811:7354): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.960:8315): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.590:7939): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.044:8043): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6771): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8338): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891046.394:7327): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.590:6729): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890987.255:7031): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.801:8681): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6770): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890993.591:7105): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.590:7294): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.934:6561): avc: denied { write } for pid=25083 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.377:8309): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6769): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.800:7429): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6732): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7239): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6747): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.146:7582): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890932.805:6778): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891120.427:7715): avc: denied { open } for pid=47110 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.800:8029): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.800:8333): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8575): avc: denied { read } for pid=25452 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.987:8722): avc: denied { write } for pid=57983 comm="tp_osd_tp" path="pipe:[220905]" dev="pipefs" ino=220905 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.811:8397): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.591:7750): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6770): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.800:6990): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.591:7399): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891239.919:8305): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.149:6662): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.802:7771): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7009): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891055.892:7386): avc: denied { read } for pid=25452 comm="msgr-worker-1" path="pipe:[141825]" dev="pipefs" ino=141825 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.800:6677): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.074:6892): avc: denied { write } for pid=41794 comm="tp_osd_tp" path="pipe:[181664]" dev="pipefs" ino=181664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.405:6898): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7238): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7757): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.131:7257): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.800:7223): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.520:8055): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.801:7082): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.032:7780): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.806:8039): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7926): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890924.222:6696): avc: denied { open } for pid=57983 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.055:8279): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.590:8056): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891304.074:8593): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.591:8014): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.800:7074): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8334): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7918): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.151:7724): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.804:7097): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.800:7222): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.802:7770): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8684): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.151:7723): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.802:8787): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.228:7694): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.811:8025): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[329285]" dev="sockfs" ino=329285 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8774): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.811:6978): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890914.359:6657): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.131:7259): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.578:7899): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.192:7570): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.577:6706): avc: denied { write } for pid=75936 comm="safe_timer" path="pipe:[267145]" dev="pipefs" ino=267145 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.515:8054): avc: denied { read } for pid=47110 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.961:7992): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.591:7629): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.716:6710): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8780): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.995:8642): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="socket:[167059]" dev="sockfs" ino=167059 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7296): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.055:8280): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.033:7782): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.804:8701): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8062): avc: denied { read } for pid=40550 comm="grafana-server" name="radosgw-sync-overview.json" dev="sda1" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890979.007:6921): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.800:7428): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.752:8046): avc: denied { read } for pid=57983 comm="msgr-worker-1" path="pipe:[220904]" dev="pipefs" ino=220904 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.804:8436): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.700:7219): avc: denied { write } for pid=47110 comm="msgr-worker-1" laddr=172.21.15.16 lport=6814 faddr=172.21.15.188 fport=49204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6603): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6750): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891304.074:8591): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.730:6975): avc: denied { search } for pid=52504 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891307.125:8648): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.591:8750): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.801:7081): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.145:7998): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891316.924:8731): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891118.264:7700): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890991.536:7050): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.046:8084): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8110): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.591:6730): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7300): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.801:7437): avc: denied { read } for pid=34046 comm="node_exporter" name="eno1" dev="sysfs" ino=34629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.802:7681): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6762): avc: denied { read } for pid=34046 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.811:7738): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.042:7963): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.384:7892): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="socket:[167059]" dev="sockfs" ino=167059 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.426:7714): avc: denied { search } for pid=47110 comm="safe_timer" name="diff" dev="sda1" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.255:8741): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.802:8355): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.229:8376): avc: denied { append } for pid=41794 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8061): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.074:6894): avc: denied { write } for pid=41794 comm="msgr-worker-0" laddr=172.21.15.16 lport=6802 faddr=172.21.15.188 fport=57734 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7435): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890984.007:7021): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.382:7065): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.375:6896): avc: denied { read } for pid=57983 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7649): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.536:7050): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7667): avc: denied { read } for pid=34046 comm="node_exporter" name="xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.803:8700): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7919): avc: denied { read } for pid=34046 comm="node_exporter" name="eno1" dev="sysfs" ino=34629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.811:8026): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[332166]" dev="sockfs" ino=332166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6915): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891120.407:7708): avc: denied { write } for pid=57983 comm="safe_timer" path="pipe:[220903]" dev="pipefs" ino=220903 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.960:8278): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.800:7224): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.013:6948): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.801:7083): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.131:7257): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891176.145:7998): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.151:7724): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891051.811:7356): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[304102]" dev="sockfs" ino=304102 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.002:6564): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7908): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.591:8286): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891269.391:8451): avc: denied { getattr } for pid=25452 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050265 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891316.131:8724): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.804:8790): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.804:8794): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.591:7105): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.800:6595): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.216:7657): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8442): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.591:6591): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890990.377:7035): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.590:7901): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.401:7659): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.948:8275): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.471:6537): avc: denied { write } for pid=25452 comm="msgr-worker-1" laddr=172.21.15.16 lport=48318 faddr=172.21.15.16 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8099): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.805:6777): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6734): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.590:6911): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.142:7969): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891182.807:8042): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891056.591:7396): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890921.591:6674): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891120.408:7710): avc: denied { read } for pid=57983 comm="msgr-worker-0" path="pipe:[220903]" dev="pipefs" ino=220903 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.126:7331): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.812:7742): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890987.592:7032): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574984 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891270.591:8452): avc: denied { getattr } for pid=97683 comm="pgrep" path="/proc/25060" dev="proc" ino=127083 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.591:8385): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890926.716:6709): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.590:8382): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.613:8801): avc: denied { search } for pid=100796 comm="pgrep" name="25083" dev="proc" ino=139122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.487:6971): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8387): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890987.255:7031): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.802:7679): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.812:6585): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.029:7373): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.210:6717): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.802:8428): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7910): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.161:6664): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.801:8110): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8773): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.592:7642): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.590:8056): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.808:7270): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.802:7089): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.590:6910): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891135.679:7784): avc: denied { read } for pid=41218 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7233): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.820:7272): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.802:8354): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.804:8436): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8576): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891052.801:7361): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.590:8620): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.566:6550): avc: denied { write } for pid=74380 comm="msgr-worker-0" laddr=172.21.15.16 lport=51952 faddr=172.21.15.188 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.031:7576): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.002:6562): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890927.591:6730): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.407:7709): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.760:7266): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890914.350:6654): avc: denied { read } for pid=41794 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.149:7636): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890932.805:6774): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8059): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890910.678:6557): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.802:7680): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.590:8012): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.803:8037): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7761): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.590:8382): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:6997): avc: denied { read } for pid=34046 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.055:8281): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7672): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891250.376:8369): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.578:7898): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.073:8676): avc: denied { search } for pid=52504 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.802:7450): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.811:6584): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[284248]" dev="sockfs" ino=284248 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6761): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7430): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891270.857:8458): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.811:6580): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7095): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890926.716:6710): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.613:8800): avc: denied { getattr } for pid=100796 comm="pgrep" path="/proc/25083" dev="proc" ino=139122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891052.801:7360): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8383): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.802:7449): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.372:7623): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.590:6586): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7908): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.045:8083): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.591:6590): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.288:7745): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:6998): avc: denied { read } for pid=34046 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.515:8053): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.775:8392): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7299): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7655): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[319667]" dev="sockfs" ino=319667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891245.591:8364): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.802:8354): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.276:7744): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.804:8795): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615890926.716:6709): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.944:7045): avc: denied { write } for pid=25083 comm="msgr-worker-2" laddr=172.21.15.16 lport=3300 faddr=172.21.15.188 fport=33678 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.315:8619): avc: denied { read } for pid=41794 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.536:7049): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7670): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6613): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8689): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.953:7252): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.523:8314): avc: denied { getattr } for pid=25452 comm="mgr-fin" name="UTC" dev="sda1" ino=1312342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.591:7297): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890984.007:7022): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.153:8405): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.801:6600): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.960:8315): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.210:6718): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6732): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7236): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.800:7663): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.927:7656): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891306.323:8646): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8696): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.550:8010): avc: denied { write } for pid=75936 comm="msgr-worker-0" laddr=172.21.15.16 lport=49282 faddr=172.21.15.16 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.255:6723): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.944:7043): avc: denied { write } for pid=25083 comm="safe_timer" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.803:8788): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.803:6694): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.800:7661): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.800:7907): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.590:8056): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.998:6739): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7666): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.590:8382): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891135.679:7785): avc: denied { getattr } for pid=41218 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.515:8053): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891049.021:7345): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891057.129:7403): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.155:8247): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.153:8405): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890981.590:6973): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.801:6686): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.591:8750): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7094): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.803:7090): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:6996): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.255:8741): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891253.021:8439): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.746:8064): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.591:8287): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.591:8389): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.812:7062): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891245.591:8365): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891057.129:7403): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.804:8119): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.803:7773): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891122.276:7743): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.058:8445): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6616): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.043:7964): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7079): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6767): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8688): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6615): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.149:7638): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891186.673:8079): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7007): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8340): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.045:8081): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.405:6898): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891107.923:7563): avc: denied { read } for pid=52504 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.591:7103): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.032:7780): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890994.009:7109): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891308.590:8655): avc: denied { search } for pid=40550 comm="grafana-server" name="dashboards" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.804:7604): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.487:6970): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.811:7731): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.168:6716): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.033:7781): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.494:6542): avc: denied { getattr } for pid=81738 comm="pgrep" path="/proc/25083" dev="proc" ino=139122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.329:8745): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.590:6910): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890984.007:7021): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6610): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.781:7039): avc: denied { read } for pid=57983 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.382:7066): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.149:7638): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.591:7751): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7913): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8321): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7759): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.811:8763): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890984.007:7020): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891316.131:8724): avc: denied { open } for pid=41794 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.590:6910): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.591:7751): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7917): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.801:7673): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.602:7976): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.811:7732): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891053.590:7368): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891181.811:8024): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=49597 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.928:8239): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.643:7377): avc: denied { open } for pid=47110 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.329:7264): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891052.801:7360): avc: denied { read } for pid=34046 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.329:8744): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.020:7274): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891244.056:8361): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.802:6688): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.643:7379): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891060.376:7416): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.591:8006): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.804:8792): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.329:8743): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890921.591:6675): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8780): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.592:7301): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="sda1" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.804:7687): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8320): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.800:8679): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6759): avc: denied { read } for pid=34046 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.811:8393): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.131:7259): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891270.637:8456): avc: denied { write } for pid=74380 comm="msgr-worker-1" laddr=172.21.15.16 lport=59336 faddr=172.21.15.16 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:7001): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.800:8770): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.134:8027): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891107.799:7558): avc: denied { read } for pid=52504 comm="msgr-worker-1" path="socket:[226293]" dev="sockfs" ino=226293 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.044:8007): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6764): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.799:7561): avc: denied { read } for pid=52504 comm="msgr-worker-1" path="pipe:[207671]" dev="pipefs" ino=207671 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891118.145:7699): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.382:7066): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.811:6576): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.384:7895): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891270.592:8455): avc: denied { read } for pid=97683 comm="pgrep" name="status" dev="proc" ino=139152 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.591:6591): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8088): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.055:8279): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890932.800:6756): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891270.591:8453): avc: denied { open } for pid=97683 comm="pgrep" path="/proc/25060/status" dev="proc" ino=127087 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.800:7663): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891329.674:8797): avc: denied { getattr } for pid=25452 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050265 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.253:8569): avc: denied { append } for pid=41794 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.026:7304): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.591:8060): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.801:8335): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891313.316:8710): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7756): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891052.800:7358): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.806:8040): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.880:7380): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8424): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891056.591:7398): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.591:8004): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7084): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.802:8113): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.590:8382): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.155:8249): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.590:7294): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.149:7636): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891330.613:8799): avc: denied { read } for pid=100796 comm="pgrep" name="status" dev="proc" ino=127087 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891173.911:7962): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7005): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.384:7893): avc: denied { write } for pid=25083 comm="msgr-worker-2" laddr=172.21.15.16 lport=3300 faddr=172.21.15.188 fport=33678 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7447): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891308.590:8655): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7653): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=42827 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.192:7569): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.288:7745): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.122:8614): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.801:8416): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6915): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.255:8742): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.610:8714): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891239.055:8280): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7422): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.192:7571): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7762): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.590:7340): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8350): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.811:8020): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7096): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891181.811:8023): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890921.591:6673): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891316.131:8724): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7423): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.142:7969): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891056.591:7400): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7439): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.520:8055): avc: denied { getattr } for pid=25452 comm="mgr-fin" name="UTC" dev="sda1" ino=1312342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891108.144:7565): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7418): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8102): avc: denied { read } for pid=34046 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.803:8434): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.802:7247): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.591:6592): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891049.021:7344): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.804:6772): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.804:8119): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8342): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7647): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.804:7779): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.591:8288): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.900:6947): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.592:7642): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891307.430:8654): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.811:8018): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.802:8113): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8442): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6764): avc: denied { read } for pid=34046 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891304.074:8594): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.679:8715): avc: denied { read } for pid=41218 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.408:7711): avc: denied { write } for pid=57983 comm="msgr-worker-0" laddr=172.21.15.16 lport=36864 faddr=172.21.15.16 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.802:7767): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.517:7716): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890910.566:6547): avc: denied { write } for pid=74380 comm="ceph_timer" path="pipe:[265044]" dev="pipefs" ino=265044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.591:6590): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6758): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.591:7750): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890915.161:6664): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890991.811:7055): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.800:8097): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7384): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7921): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8576): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7443): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.140:8072): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890979.487:6942): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7417): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891113.204:7692): avc: denied { open } for pid=41794 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.316:8666): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.802:6688): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.643:7377): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.804:7779): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7913): avc: denied { read } for pid=34046 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.809:8256): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.138:8734): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.803:8116): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891321.811:8767): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=38250 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.590:7100): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.802:8351): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8107): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.811:7348): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.192:7570): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.074:6890): avc: denied { read } for pid=57983 comm="msgr-worker-0" path="socket:[264888]" dev="sockfs" ino=264888 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.590:7100): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8688): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.802:6766): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.161:6664): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.998:6740): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8102): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891313.316:8709): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.029:7374): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6913): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.760:7267): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.801:6680): avc: denied { read } for pid=34046 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.800:6595): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6753): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[285486]" dev="sockfs" ino=285486 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8345): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.149:6662): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8442): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.146:7582): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891180.049:8015): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.802:8113): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.636:6555): avc: denied { read } for pid=52504 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.646:7643): avc: denied { dac_override } for pid=33236 comm="ceph-crash" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.140:8072): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891046.394:7329): avc: denied { read } for pid=47110 comm="msgr-worker-2" path="socket:[200938]" dev="sockfs" ino=200938 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8385): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.161:6664): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.229:8374): avc: denied { write } for pid=75936 comm="msgr-worker-2" laddr=172.21.15.16 lport=51814 faddr=172.21.15.188 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8778): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.802:8353): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.803:6692): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7008): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.131:7259): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891319.077:8756): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.646:7643): avc: denied { search } for pid=33236 comm="ceph-crash" name="/" dev="overlay" ino=1574834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c883,c972 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.426:7714): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.591:6589): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6745): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.802:8115): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.636:6556): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.800:6594): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7669): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.426:7714): avc: denied { read } for pid=47110 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.150:8329): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.591:8623): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.800:7663): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7298): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.487:6942): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.801:8786): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.811:8021): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.802:7681): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:6994): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.322:7730): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8060): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891110.590:7626): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.006:6919): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8440): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8675): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[346836]" dev="sockfs" ino=346836 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891054.022:7371): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.058:8446): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.808:7268): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7079): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.591:7630): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.288:7745): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.801:8418): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.800:6678): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.494:6543): avc: denied { read } for pid=81738 comm="pgrep" name="status" dev="proc" ino=139152 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.800:7073): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.800:7907): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.591:6589): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.804:8793): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.591:8014): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.020:7273): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.802:6608): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891241.811:8322): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.802:8697): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.811:8394): avc: denied { getattr } for pid=41218 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=177672 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.591:7343): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.520:8055): avc: denied { search } for pid=25452 comm="mgr-fin" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.405:6899): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.800:8680): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7085): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.803:6691): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.700:7215): avc: denied { append } for pid=47110 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396209 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.045:8082): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.590:8012): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.802:8111): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6763): avc: denied { read } for pid=34046 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.803:8433): avc: denied { read } for pid=34046 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.801:8032): avc: denied { read } for pid=34046 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6734): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.801:7438): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.375:6896): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.031:7576): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7086): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8344): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.079:8814): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.426:7714): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.802:8427): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890913.995:6641): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.255:8740): avc: denied { search } for pid=40550 comm="grafana-server" name="var" dev="sda1" ino=1968519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.031:7577): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.811:7357): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[305803]" dev="sockfs" ino=305803 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.794:6946): avc: denied { read } for pid=52504 comm="msgr-worker-1" path="pipe:[207671]" dev="pipefs" ino=207671 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.377:7624): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6769): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8102): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.801:8031): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7917): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.801:7674): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890987.255:7030): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891332.802:8805): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8100): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8671): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.802:7772): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7573): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.208:7936): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.591:8625): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891316.131:8724): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.800:7661): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.210:6719): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7299): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.804:7686): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8440): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.412:6727): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.894:7783): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.255:6725): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.517:7716): avc: denied { search } for pid=25452 comm="mgr-fin" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.802:8354): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6608): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7417): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.800:7221): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7297): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890980.377:6949): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.508:6964): avc: denied { search } for pid=25452 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891321.811:8768): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[355253]" dev="sockfs" ino=355253 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890913.996:6644): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891107.923:7564): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8414): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7449): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.802:6690): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891186.140:8072): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.590:8749): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891307.125:8648): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891055.643:7377): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6770): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.804:8791): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.802:8111): avc: denied { read } for pid=34046 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8441): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.804:8789): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.590:8382): avc: denied { search } for pid=40550 comm="grafana-server" name="diff" dev="sda1" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.122:8614): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.801:8777): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.591:7295): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.801:8415): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.800:8772): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.800:7753): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.804:8702): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.591:8626): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.578:7897): avc: denied { open } for pid=25452 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.131:7259): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891240.960:8316): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.255:7338): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.031:7576): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890990.781:7038): avc: denied { read } for pid=57983 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.804:7685): avc: denied { search } for pid=34046 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.006:6918): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891054.022:7370): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.756:7323): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:6992): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.801:8032): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.610:8713): avc: denied { read } for pid=57983 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.255:6724): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890994.009:7107): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.142:7969): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891237.719:8236): avc: denied { read } for pid=25083 comm="msgr-worker-1" path="socket:[161491]" dev="sockfs" ino=161491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891059.022:7413): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.590:6586): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7087): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.802:7246): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.591:8750): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7442): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8387): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891309.075:8659): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8425): avc: denied { read } for pid=34046 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891316.131:8724): avc: denied { read } for pid=41794 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.803:8036): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891304.074:8591): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.802:7246): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.379:6987): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891270.637:8457): avc: denied { read } for pid=41794 comm="msgr-worker-1" path="socket:[265056]" dev="sockfs" ino=265056 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.566:6554): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6618): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891051.811:7353): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.800:8332): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7912): avc: denied { read } for pid=34046 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6734): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890932.805:6776): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.578:7897): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8421): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.055:8280): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.803:6693): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.508:6964): avc: denied { search } for pid=25452 comm="mgr-fin" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7229): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.800:6754): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.590:8284): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890913.996:6642): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.811:7737): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.126:7391): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.646:7643): avc: denied { open } for pid=33236 comm="ceph-crash" path="/var/lib/ceph/crash" dev="dm-4" ino=16777344 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.801:6685): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.811:7735): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6915): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891059.022:7411): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8694): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.591:7629): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:6991): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8669): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.811:7739): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=59910 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.800:8678): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8416): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.591:8750): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.349:8583): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6912): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.805:6779): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890991.811:7060): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[300144]" dev="sockfs" ino=300144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.801:6596): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.804:7775): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7757): avc: denied { read } for pid=34046 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7668): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.876:7933): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.804:8704): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.811:6583): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[286030]" dev="sockfs" ino=286030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.122:8614): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891061.811:7421): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.591:7106): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.802:7930): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891112.805:7690): avc: denied { read } for pid=34046 comm="node_exporter" name="coretemp.0" dev="sysfs" ino=48061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.804:7779): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.591:8389): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.379:6985): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890914.266:6653): avc: denied { append } for pid=52504 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891245.591:8366): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.140:8072): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891315.526:8712): avc: denied { getattr } for pid=25452 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.122:8612): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.590:8620): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891332.800:8802): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8341): avc: denied { read } for pid=34046 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.002:6563): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.002:6564): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7230): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.801:7763): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.811:7741): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[321641]" dev="sockfs" ino=321641 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890914.350:6654): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7239): avc: denied { read } for pid=34046 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.800:7905): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8059): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.590:7100): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.138:8734): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891052.804:7364): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.803:8431): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.122:8614): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.800:6593): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.131:7259): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891307.255:8653): avc: denied { search } for pid=40550 comm="grafana-server" name="var" dev="sda1" ino=1968519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.043:7965): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7433): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.150:8329): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.152:8403): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.801:8348): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.800:8770): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890913.996:6642): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.801:6596): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.800:6989): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.427:7715): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8328): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[335627]" dev="sockfs" ino=335627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891333.162:8807): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.487:6942): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8319): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7237): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.800:8413): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.140:8072): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.802:8354): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8781): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7678): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.591:7752): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574978 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8061): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.880:7382): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8062): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.784:8238): avc: denied { write } for pid=47110 comm="msgr-worker-0" laddr=172.21.15.16 lport=6816 faddr=172.21.15.188 fport=42550 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8104): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.405:6900): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891253.021:8443): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7917): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891270.591:8453): avc: denied { search } for pid=97683 comm="pgrep" name="25060" dev="proc" ino=127083 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.146:7582): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.800:7753): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.804:8789): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7091): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.136:6571): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7077): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7243): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8349): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8784): avc: denied { read } for pid=34046 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.523:8314): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="overlay" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890994.009:7108): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7443): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.591:7397): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.803:8356): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.944:7044): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.591:7942): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.060:8306): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.811:8086): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.803:8035): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.801:8103): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.382:7064): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891240.981:8318): avc: denied { write } for pid=25083 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891304.074:8591): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.802:8429): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7678): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.800:7905): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.021:8442): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7924): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8335): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8575): avc: denied { open } for pid=25452 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.811:7355): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=50471 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7913): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.803:7010): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.804:8118): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.426:7714): avc: denied { open } for pid=47110 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891052.804:7365): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891122.276:7743): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.142:7969): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.801:8100): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.804:8703): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615890993.591:7104): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890932.800:6756): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8092): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.804:8791): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.811:7056): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8692): avc: denied { read } for pid=34046 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.802:7928): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890986.850:7028): avc: denied { open } for pid=57983 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.151:8402): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7438): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6915): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.522:8367): avc: denied { open } for pid=57983 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.811:8399): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[335809]" dev="sockfs" ino=335809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890913.995:6641): avc: denied { search } for pid=25083 comm="safe_timer" name="diff" dev="sda1" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890990.781:7039): avc: denied { open } for pid=57983 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.800:6678): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6613): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.210:6718): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.590:8283): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.002:6564): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.646:7643): avc: denied { search } for pid=33236 comm="ceph-crash" name="var" dev="sda1" ino=1574840 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c883,c972 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.754:8391): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6762): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.803:8788): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891195.679:8123): avc: denied { open } for pid=41218 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6734): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.375:6896): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.802:7929): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.636:6555): avc: denied { search } for pid=52504 comm="safe_timer" name="diff" dev="sda1" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.122:8612): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891118.264:7701): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890983.499:7019): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.801:6682): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.960:8315): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.801:7678): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.811:8394): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.591:6914): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8420): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.800:8333): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.138:8734): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.382:7064): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.801:7441): avc: denied { read } for pid=34046 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890931.811:6751): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=58459 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.800:8413): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.972:8317): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.073:6889): avc: denied { read } for pid=41794 comm="msgr-worker-0" path="socket:[265684]" dev="sockfs" ino=265684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.811:6582): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=39422 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.126:7331): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7921): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7452): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.802:7772): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891270.592:8455): avc: denied { search } for pid=97683 comm="pgrep" name="25083" dev="proc" ino=139122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.948:8276): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.754:8390): avc: denied { read } for pid=52504 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8414): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.591:7751): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.229:8375): avc: denied { read } for pid=41794 comm="msgr-worker-1" path="socket:[266098]" dev="sockfs" ino=266098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.130:8665): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.801:6598): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.591:7943): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.591:7628): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.800:8771): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.002:6564): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.253:8567): avc: denied { read } for pid=41794 comm="msgr-worker-2" path="socket:[269569]" dev="sockfs" ino=269569 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6605): avc: denied { read } for pid=34046 comm="node_exporter" name="eno1" dev="sysfs" ino=34629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.811:8394): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.605:7575): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.007:6920): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8579): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.591:7631): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891304.074:8590): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891333.163:8808): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890981.811:6977): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.591:7102): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7233): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891059.022:7412): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.204:7572): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7909): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8693): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.508:6964): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.801:8424): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.801:7436): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7766): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.811:6983): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[297243]" dev="sockfs" ino=297243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.811:8395): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7084): avc: denied { read } for pid=34046 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7764): avc: denied { read } for pid=34046 comm="node_exporter" name="eno1" dev="sysfs" ino=34629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.566:6548): avc: denied { read } for pid=74380 comm="msgr-worker-1" path="pipe:[265044]" dev="pipefs" ino=265044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8686): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7442): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890983.379:7017): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.591:8289): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.800:6990): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.074:6891): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8348): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.722:8255): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7760): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.578:7898): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.475:6941): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.494:6541): avc: denied { open } for pid=81738 comm="pgrep" path="/proc/25060/status" dev="proc" ino=127087 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.801:8345): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.754:8391): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6614): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891319.077:8755): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.155:8249): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891313.316:8708): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891054.022:7370): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8109): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.591:7397): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891308.591:8657): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890994.009:7107): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.948:8275): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.517:7716): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="overlay" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.508:6964): avc: denied { getattr } for pid=25452 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7445): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891306.816:8647): avc: denied { write } for pid=40550 comm="grafana-server" path="socket:[332757]" dev="sockfs" ino=332757 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.151:7724): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891237.980:8241): avc: denied { write } for pid=25083 comm="safe_timer" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.591:7631): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891332.801:8803): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.494:6543): avc: denied { search } for pid=81738 comm="pgrep" name="25083" dev="proc" ino=139122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.575:7071): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.801:8033): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891316.674:8730): avc: denied { search } for pid=52504 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.998:6740): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.503:6544): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.801:8337): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.661:8077): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7007): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890921.591:6674): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.803:6769): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.803:7090): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.805:7691): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891319.077:8754): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8087): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7426): avc: denied { read } for pid=41218 comm="prometheus" path="socket:[307771]" dev="sockfs" ino=307771 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.590:8057): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.804:8793): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.613:7302): avc: denied { append } for pid=41794 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8783): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.801:6681): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.590:7294): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.006:6919): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.517:7625): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.229:8372): avc: denied { read } for pid=75936 comm="msgr-worker-1" path="pipe:[267145]" dev="pipefs" ino=267145 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890991.811:7059): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=47717 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.033:7781): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890913.996:6642): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7077): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8103): avc: denied { read } for pid=34046 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891333.414:8812): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.802:6608): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891055.880:7381): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.800:6679): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.591:8288): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890910.471:6538): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="socket:[145916]" dev="sockfs" ino=145916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.811:6581): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.520:8055): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="overlay" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.161:6664): avc: denied { getattr } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.802:8114): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.928:8240): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.613:8799): avc: denied { open } for pid=100796 comm="pgrep" path="/proc/25060/status" dev="proc" ino=127087 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891120.517:7716): avc: denied { search } for pid=25452 comm="mgr-fin" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.800:7427): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.799:7559): avc: denied { write } for pid=52504 comm="msgr-worker-1" laddr=172.21.15.16 lport=45420 faddr=172.21.15.188 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.153:8405): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.800:7755): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.299:8048): avc: denied { append } for pid=41794 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6746): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.802:8426): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7385): avc: denied { write } for pid=25452 comm="safe_timer" path="pipe:[141825]" dev="pipefs" ino=141825 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.808:7269): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.804:8117): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7240): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7241): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8320): avc: denied { getattr } for pid=41218 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=177672 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.590:8283): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7095): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.800:7221): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.987:8719): avc: denied { read } for pid=57983 comm="msgr-worker-2" path="socket:[232093]" dev="sockfs" ino=232093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7677): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.610:8713): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8576): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.591:8005): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.804:7777): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7425): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[312505]" dev="sockfs" ino=312505 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891059.022:7412): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.592:7301): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.803:8357): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890914.359:6657): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7244): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.806:8040): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.880:7381): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8778): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.475:6940): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6760): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8695): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.700:7217): avc: denied { write } for pid=52504 comm="msgr-worker-2" laddr=172.21.15.16 lport=6822 faddr=172.21.15.188 fport=52946 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.802:6688): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8673): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=47718 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7228): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.591:7942): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.802:7450): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.566:6552): avc: denied { read } for pid=41794 comm="msgr-worker-1" path="socket:[265056]" dev="sockfs" ino=265056 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.679:8448): avc: denied { read } for pid=41218 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.590:7746): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.138:8734): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.375:6896): avc: denied { open } for pid=57983 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.255:8739): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7432): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7228): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7668): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.404:6897): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6733): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891180.377:8016): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891304.074:8590): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891313.133:8706): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891182.801:8030): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.800:8412): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.800:6593): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7092): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.142:7969): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.800:7221): avc: denied { search } for pid=34046 comm="node_exporter" name="diff" dev="sda1" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891179.044:8008): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.581:6965): avc: denied { open } for pid=41794 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7228): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8668): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890993.590:7101): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891251.591:8386): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.591:7749): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891119.148:7704): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.811:7734): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.591:7944): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.590:7626): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891173.590:7938): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.801:6601): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6757): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.804:7094): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.643:7378): avc: denied { append } for pid=47110 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396209 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.142:7967): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.800:7755): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.805:8438): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890910.566:6551): avc: denied { write } for pid=74380 comm="msgr-worker-2" laddr=172.21.15.16 lport=51732 faddr=172.21.15.188 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.382:7066): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.802:8698): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.058:8445): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.590:7341): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890926.777:6711): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7651): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7924): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890915.161:6664): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.523:8314): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.802:8430): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.679:8450): avc: denied { getattr } for pid=41218 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8774): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7082): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7922): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891053.134:7367): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.152:8403): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7921): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.566:6549): avc: denied { write } for pid=74380 comm="msgr-worker-1" laddr=172.21.15.16 lport=59336 faddr=172.21.15.16 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.802:7928): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6752): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[289794]" dev="sockfs" ino=289794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6604): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7665): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.591:6974): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891315.679:8717): avc: denied { getattr } for pid=41218 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7077): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.591:7632): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1574989 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8576): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.802:7248): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615890910.503:6544): avc: denied { search } for pid=25452 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.804:8794): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.919:8304): avc: denied { open } for pid=52504 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.800:7223): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891309.562:8660): avc: denied { write } for pid=75936 comm="safe_timer" path="pipe:[267144]" dev="pipefs" ino=267144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.800:6990): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891052.804:7364): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8688): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.674:8589): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6916): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891240.972:8317): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.002:6564): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.800:7907): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891118.264:7700): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891239.591:8288): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.800:6756): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891308.590:8656): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891319.077:8753): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.044:8043): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8684): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.151:7724): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.591:6913): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.801:7664): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.255:8740): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8338): avc: denied { read } for pid=34046 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891135.679:7786): avc: denied { getattr } for pid=41218 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.800:7075): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8695): avc: denied { read } for pid=34046 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.591:7630): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891245.591:8365): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890927.222:6721): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891319.077:8754): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.590:7294): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891057.129:7403): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890927.210:6718): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.515:8053): avc: denied { open } for pid=47110 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.590:7626): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8091): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7230): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891186.661:8077): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.636:6556): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.613:8801): avc: denied { read } for pid=100796 comm="pgrep" name="status" dev="proc" ino=139152 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.590:7626): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891173.139:7935): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.494:6543): avc: denied { open } for pid=81738 comm="pgrep" path="/proc/25083/status" dev="proc" ino=139152 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.800:8413): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.661:8078): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.804:8701): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891335.166:8815): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.800:8411): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.800:8680): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7388): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="socket:[145916]" dev="sockfs" ino=145916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.716:6709): avc: denied { open } for pid=52504 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7650): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.045:8081): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.590:8620): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.341:8746): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.803:7012): avc: denied { fork } for pid=34046 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.831:7016): avc: denied { append } for pid=25452 comm="log" path="/var/log/ceph/ceph-mgr.smithi016.leovdj.log" dev="sda1" ino=396134 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.548:8410): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.055:8279): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891310.377:8662): avc: denied { append } for pid=41218 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.880:7381): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.006:6918): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890926.453:6704): avc: denied { read } for pid=25452 comm="msgr-worker-2" path="socket:[239802]" dev="sockfs" ino=239802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.253:8571): avc: denied { write } for pid=41794 comm="tp_osd_tp" path="pipe:[181666]" dev="pipefs" ino=181666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.517:7625): avc: denied { search } for pid=25452 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.223:8677): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.249:7729): avc: denied { search } for pid=52504 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8339): avc: denied { read } for pid=34046 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.804:7683): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891119.033:7702): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.613:8798): avc: denied { getattr } for pid=100796 comm="pgrep" path="/proc/25060" dev="proc" ino=127083 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.802:7088): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8773): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.515:8054): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.384:7894): avc: denied { write } for pid=25083 comm="ms_dispatch" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7077): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8422): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.591:7943): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.801:6682): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7424): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=50817 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891195.679:8125): avc: denied { getattr } for pid=41218 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.802:8115): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891057.129:7402): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891052.804:7363): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.131:7258): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.307:8580): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8058): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.329:7937): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.045:8082): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7758): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.591:7751): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.953:7251): avc: denied { write } for pid=25083 comm="safe_timer" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { search } for pid=25452 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.811:7732): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.517:7716): avc: denied { search } for pid=25452 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891059.022:7412): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.919:8304): avc: denied { read } for pid=52504 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.475:6940): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.756:7323): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891052.801:7361): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6617): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891122.590:7746): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.555:6909): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.146:7582): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.802:7245): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891054.022:7370): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.591:7941): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.139:8071): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891052.801:7362): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890984.382:7024): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891057.129:7403): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.801:8335): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.591:8623): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891319.077:8754): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7654): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[315940]" dev="sockfs" ino=315940 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891060.374:7415): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.804:7688): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615890991.811:7057): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.804:8120): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7433): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7387): avc: denied { write } for pid=25452 comm="msgr-worker-1" laddr=172.21.15.16 lport=48318 faddr=172.21.15.16 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.590:6586): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.515:8053): avc: denied { read } for pid=47110 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.800:7429): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891318.648:8752): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.802:8112): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8326): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=44132 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.591:7748): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7665): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.055:8279): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.945:7046): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="socket:[167059]" dev="sockfs" ino=167059 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.800:8678): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:6994): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.640:8588): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.590:7746): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890924.222:6696): avc: denied { read } for pid=57983 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.427:7715): avc: denied { read } for pid=47110 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7912): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.043:7964): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7439): avc: denied { search } for pid=34046 comm="node_exporter" name="kernel" dev="proc" ino=161390 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7439): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.803:6612): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890931.811:6744): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.591:8625): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.372:7622): avc: denied { write } for pid=25083 comm="ms_dispatch" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.928:8239): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890910.636:6555): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.153:8405): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891240.523:8314): avc: denied { getattr } for pid=25452 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.032:7693): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.679:8449): avc: denied { getattr } for pid=41218 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7646): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.811:8760): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.445:7974): avc: denied { append } for pid=25452 comm="log" path="/var/log/ceph/ceph-mgr.smithi016.leovdj.log" dev="sda1" ino=396134 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.487:6970): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.517:7716): avc: denied { getattr } for pid=25452 comm="mgr-fin" name="UTC" dev="sda1" ino=1312342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.591:6914): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890913.996:6643): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.138:8733): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.043:7964): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.140:8072): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.591:6588): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.811:8766): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.800:6679): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.592:7301): avc: denied { read } for pid=40550 comm="grafana-server" name="hosts-overview.json" dev="sda1" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891321.811:8764): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.140:8072): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.811:7733): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.811:7349): avc: denied { search } for pid=41218 comm="prometheus" name="/" dev="overlay" ino=1970606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.811:7054): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.590:8283): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.802:8352): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891252.801:8416): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.803:8788): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.375:6896): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890991.548:7052): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890981.811:6982): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[296227]" dev="sockfs" ino=296227 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.590:7746): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891056.590:7394): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890979.487:6943): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.801:7085): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.155:8249): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890980.508:6964): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="overlay" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.591:7941): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.253:8570): avc: denied { write } for pid=57983 comm="tp_osd_tp" path="pipe:[220905]" dev="pipefs" ino=220905 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.811:8765): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7668): avc: denied { read } for pid=34046 comm="node_exporter" name="mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891239.591:8288): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.405:6900): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.800:8680): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.643:7379): avc: denied { open } for pid=47110 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.803:8036): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.754:8390): avc: denied { open } for pid=52504 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890994.009:7108): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891186.139:8070): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.801:8688): avc: denied { read } for pid=34046 comm="node_exporter" name="entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.329:8582): avc: denied { signal } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6605): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891059.022:7411): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.801:8780): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8424): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:6999): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.800:7073): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.255:7336): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891053.590:7368): avc: denied { search } for pid=40550 comm="grafana-server" name="dashboards" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.800:7427): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8417): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.591:8624): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891061.811:7420): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.045:8081): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.919:8304): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8350): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891245.591:8364): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891059.023:7414): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.811:6980): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.581:6965): avc: denied { read } for pid=41794 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.499:6972): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.805:6775): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7915): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.800:7755): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.155:8249): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890927.255:6725): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891108.192:7570): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891109.031:7577): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.801:8690): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.804:8122): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.148:6574): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.811:7055): avc: denied { getattr } for pid=41218 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=177672 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7910): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.253:8572): avc: denied { read } for pid=41794 comm="msgr-worker-2" path="pipe:[181666]" dev="pipefs" ino=181666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.804:8702): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.591:8622): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.923:7563): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890918.996:6671): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.805:6776): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.437:8330): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.548:7053): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891270.591:8453): avc: denied { read } for pid=97683 comm="pgrep" name="status" dev="proc" ino=127087 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.802:6689): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.138:8732): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890922.803:6694): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.590:7938): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7229): avc: denied { read } for pid=34046 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.972:8317): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.754:8391): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.229:8371): avc: denied { write } for pid=75936 comm="ceph_timer" path="pipe:[267145]" dev="pipefs" ino=267145 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8090): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.153:8405): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891195.679:8124): avc: denied { getattr } for pid=41218 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.923:7564): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7673): avc: denied { read } for pid=34046 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.640:8254): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891303.267:8578): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.679:8716): avc: denied { getattr } for pid=41218 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.590:7395): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.801:7242): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.586:8017): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.802:8115): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.820:7271): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890980.508:6964): avc: denied { search } for pid=25452 comm="mgr-fin" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.801:7916): avc: denied { read } for pid=34046 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.754:8390): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.131:7347): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890914.350:6654): avc: denied { open } for pid=41794 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.805:7099): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.803:7011): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890981.875:6984): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.805:6777): avc: denied { search } for pid=34046 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.995:7063): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891319.220:8757): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.578:7897): avc: denied { read } for pid=25452 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.591:6730): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891242.800:8333): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.329:8744): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.045:8044): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890932.801:6757): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.222:6720): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890981.811:6981): avc: denied { getattr } for pid=41218 comm="prometheus" laddr=172.21.15.16 lport=43441 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6603): avc: denied { read } for pid=34046 comm="node_exporter" name="file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.876:7934): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.020:7275): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.379:6987): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.033:7781): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.329:8744): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.591:7398): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.802:6602): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.149:7638): avc: denied { write } for pid=25060 comm="conmon" name="socket" dev="tmpfs" ino=14346 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890926.577:6708): avc: denied { write } for pid=75936 comm="msgr-worker-1" laddr=172.21.15.16 lport=37430 faddr=172.21.15.16 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.591:8061): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.808:7269): avc: denied { search } for pid=25452 comm="safe_timer" name="libpod-ffa3924bb18f41474394881a2accd255a360a4513cc4cfe010d7cce1bd46e902.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891317.590:8748): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.591:6591): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.794:6945): avc: denied { write } for pid=52504 comm="tp_osd_tp" path="pipe:[207671]" dev="pipefs" ino=207671 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.610:8713): avc: denied { open } for pid=57983 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.590:7938): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.591:6917): avc: denied { read } for pid=40550 comm="grafana-server" name="hosts-overview.json" dev="sda1" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.800:8097): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="overlay" ino=1970489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7756): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.806:8041): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891047.255:7339): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.026:7304): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:6993): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7005): avc: denied { search } for pid=34046 comm="node_exporter" name="1" dev="proc" ino=154326 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891173.591:7943): avc: denied { read open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890993.590:7100): avc: denied { getattr } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891312.801:8681): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.228:7658): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891314.075:8711): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891317.138:8734): avc: denied { search } for pid=25060 comm="conmon" name="systemd" dev="tmpfs" ino=3299 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.805:7098): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.801:8423): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.804:7684): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7914): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7675): avc: denied { read } for pid=34046 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.184:7319): avc: denied { search } for pid=57983 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890988.387:7033): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890987.255:7030): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890990.781:7038): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7444): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890912.802:6606): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890990.781:7038): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8099): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891052.804:7363): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891238.155:8249): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.801:8425): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.760:7267): avc: denied { open } for pid=52504 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.800:8772): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.006:6919): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891110.210:7613): avc: denied { write } for pid=52504 comm="msgr-worker-2" laddr=172.21.15.16 lport=6822 faddr=172.21.15.188 fport=52946 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7911): avc: denied { search } for pid=34046 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.980:8242): avc: denied { read } for pid=25083 comm="msgr-worker-2" path="pipe:[122481]" dev="pipefs" ino=122481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890928.369:6734): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891175.142:7994): avc: denied { write } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.520:8055): avc: denied { getattr } for pid=25452 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891315.987:8721): avc: denied { write } for pid=57983 comm="msgr-worker-2" laddr=172.21.15.16 lport=6828 faddr=172.21.15.188 fport=34848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.151:7722): avc: denied { write } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.591:7749): avc: denied { read } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890979.475:6939): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.020:7273): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891055.643:7379): avc: denied { read } for pid=47110 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7448): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.801:7231): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.801:7760): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891122.804:7777): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891311.811:8674): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[352532]" dev="sockfs" ino=352532 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.843:8068): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.240:7695): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891239.591:8287): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.801:7002): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.643:7377): avc: denied { read } for pid=47110 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.155:8249): avc: denied { search } for pid=25060 comm="conmon" name="journal" dev="tmpfs" ino=14342 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891305.590:8620): avc: denied { search } for pid=40550 comm="grafana-server" name="etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891314.075:8711): avc: denied { search } for pid=25083 comm="safe_timer" name="/" dev="overlay" ino=1443980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.804:8435): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.803:8699): avc: denied { getattr } for pid=34046 comm="node_exporter" name="/" dev="tmpfs" ino=3291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.806:8038): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7677): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891305.591:8625): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.801:6599): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.805:8437): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891172.801:7924): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=162373 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.811:8761): avc: denied { create } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.590:8382): avc: denied { search } for pid=40550 comm="grafana-server" name="dashboards" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891309.075:8658): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.800:7075): avc: denied { read } for pid=34046 comm="node_exporter" name="stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890979.613:6944): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891108.479:7574): avc: denied { search } for pid=47110 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.800:7906): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.802:7771): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.512:7375): avc: denied { read } for pid=25452 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891303.267:8577): avc: denied { getattr } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.058:8445): avc: denied { read } for pid=25083 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.805:7098): avc: denied { read } for pid=34046 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.892:7383): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.801:8098): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc/7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890986.850:7028): avc: denied { read } for pid=57983 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891237.928:8239): avc: denied { search } for pid=52504 comm="safe_timer" name="diff" dev="sda1" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.802:6602): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.379:6985): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891121.151:7724): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890912.802:6603): avc: denied { search } for pid=34046 comm="node_exporter" name="fs" dev="proc" ino=162372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.044:8043): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.613:8801): avc: denied { open } for pid=100796 comm="pgrep" path="/proc/25083/status" dev="proc" ino=139152 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.800:8411): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8784): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890992.602:7072): avc: denied { search } for pid=52504 comm="safe_timer" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.801:6680): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891121.811:7740): avc: denied { write } for pid=41218 comm="prometheus" path="socket:[320966]" dev="sockfs" ino=320966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.578:7897): avc: denied { search } for pid=25452 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8776): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.060:8306): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891192.804:8120): avc: denied { search } for pid=34046 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890980.581:6966): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891332.843:8806): avc: denied { append } for pid=57983 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.801:6682): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891242.801:8334): avc: denied { read } for pid=34046 comm="node_exporter" name="fd" dev="proc" ino=167045 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.255:7339): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:6997): avc: denied { read } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7446): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8785): avc: denied { getattr } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.700:7214): avc: denied { read } for pid=41794 comm="msgr-worker-0" path="socket:[228325]" dev="sockfs" ino=228325 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.045:8081): avc: denied { search } for pid=25083 comm="safe_timer" name="var" dev="sda1" ino=1443991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c122,c213 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.801:8781): avc: denied { read } for pid=34046 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890983.499:7018): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.031:7579): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891051.811:7352): avc: denied { setopt } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891241.811:8325): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.590:7900): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.405:6900): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="tmpfs" ino=3290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.148:6573): avc: denied { read } for pid=25452 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891120.963:7721): avc: denied { write } for pid=25083 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi016/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.801:8775): avc: denied { search } for pid=34046 comm="node_exporter" name="net" dev="proc" ino=158284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890913.995:6641): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891057.129:7403): avc: denied { sendto } for pid=25060 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.704:7660): avc: denied { search } for pid=41794 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891182.803:8035): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891109.146:7580): avc: denied { use } for pid=25083 comm="fn_monstore" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891239.591:8285): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.801:7667): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7652): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890911.075:6569): avc: denied { search } for pid=47110 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c6,c210 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891319.077:8753): avc: denied { dac_read_search } for pid=25083 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891182.806:8039): avc: denied { search } for pid=34046 comm="node_exporter" name="user" dev="tmpfs" ino=2151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891240.060:8308): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890982.801:7004): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.804:8121): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891242.801:8341): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.590:7747): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc" dev="sda1" ino=1968516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891135.679:7784): avc: denied { open } for pid=41218 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891059.022:7411): avc: denied { getattr } for pid=25083 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891053.591:7369): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891318.648:8752): avc: denied { read } for pid=52504 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.811:7058): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890978.405:6900): avc: denied { search } for pid=25060 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890928.998:6741): avc: denied { getattr } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891312.803:8699): avc: denied { search } for pid=34046 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.808:7269): avc: denied { open } for pid=25452 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.646:7643): avc: denied { read } for pid=33236 comm="ceph-crash" name="crash" dev="dm-4" ino=16777344 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890991.536:7050): avc: denied { read } for pid=25452 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.590:7394): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.800:7429): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.255:7337): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.141:7392): avc: denied { search } for pid=52504 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970692 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c166,c948 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.515:8053): avc: denied { search } for pid=47110 comm="safe_timer" name="diff" dev="sda1" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891052.804:7366): avc: denied { search } for pid=34046 comm="node_exporter" name="host" dev="sda1" ino=1970498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c475,c877 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890911.258:6575): avc: denied { search } for pid=57983 comm="safe_timer" name="/" dev="overlay" ino=1970711 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c307,c899 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.153:8404): avc: denied { read } for pid=25060 comm="conmon" path="pipe:[124244]" dev="pipefs" ino=124244 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891062.801:7441): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891308.591:8657): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890927.590:6728): avc: denied { getattr } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890922.801:6684): avc: denied { read } for pid=34046 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891122.288:7745): avc: denied { open } for pid=25452 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891055.643:7377): avc: denied { search } for pid=47110 comm="safe_timer" name="diff" dev="sda1" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.325:8447): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890920.002:6672): avc: denied { write } for pid=25060 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890927.591:6730): avc: denied { read } for pid=40550 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.801:7916): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890987.255:7029): avc: denied { lock } for pid=40550 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968525 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.801:8099): avc: denied { search } for pid=34046 comm="node_exporter" name="7" dev="proc" ino=160872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.504:7393): avc: denied { search } for pid=41794 comm="safe_timer" name="/" dev="overlay" ino=1970654 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c286,c623 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891238.960:8277): avc: denied { search } for pid=25452 comm="safe_timer" name="etc" dev="sda1" ino=1444005 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890981.811:6977): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891309.075:8658): avc: denied { open } for pid=25083 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi016/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.217:7891): avc: denied { append } for pid=52504 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396213 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891056.591:7399): avc: denied { open } for pid=40550 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890982.802:7005): avc: denied { open } for pid=34046 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=166182 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890978.590:6910): avc: denied { search } for pid=40550 comm="grafana-server" name="/" dev="overlay" ino=1968510 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c75,c151 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.520:8055): avc: denied { search } for pid=25452 comm="mgr-fin" name="/" dev="overlay" ino=1443999 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c329,c384 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.020:7274): avc: denied { search } for pid=25083 comm="safe_timer" name="mon.smithi016" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.811:8093): avc: denied { connect } for pid=41218 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.811:7647): avc: denied { search } for pid=41218 comm="prometheus" name="etc" dev="sda1" ino=1970614 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c34,c265 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890992.801:7080): avc: denied { search } for pid=34046 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.801:7434): avc: denied { open } for pid=34046 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891062.802:7451): avc: denied { search } for pid=34046 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"']

pass 5970005 2021-03-16 05:27:18 2021-03-16 10:13:00 2021-03-16 10:44:39 0:31:39 0:21:57 0:09:42 smithi master centos 8.3 rados:cephadm/upgrade/{1-start-distro/1-start-centos_8.3-octopus 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/classic} 2
pass 5970006 2021-03-16 05:27:19 2021-03-16 10:13:21 2021-03-16 10:59:00 0:45:39 0:34:29 0:11:10 smithi master ubuntu 18.04 rados:cephadm/with-work/{0-distro/ubuntu_18.04 fixed-2 mode/packaged mon_election/connectivity msgr/async start tasks/rados_api_tests} 2
pass 5970007 2021-03-16 05:27:20 2021-03-16 10:13:31 2021-03-16 11:00:34 0:47:03 0:39:39 0:07:24 smithi master rhel 8.3 rados:cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/connectivity start} 2
pass 5970008 2021-03-16 05:27:21 2021-03-16 10:13:41 2021-03-16 11:34:39 1:20:58 1:08:23 0:12:35 smithi master ubuntu 20.04 rados:cephadm/thrash/{0-distro/ubuntu_20.04_kubic_testing 1-start 2-thrash 3-tasks/radosbench fixed-2 msgr/async root} 2
pass 5970009 2021-03-16 05:27:22 2021-03-16 10:15:12 2021-03-16 10:32:20 0:17:08 0:08:34 0:08:34 smithi master ubuntu 20.04 rados:cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/classic task/test_adoption} 1
pass 5970010 2021-03-16 05:27:22 2021-03-16 10:15:12 2021-03-16 10:41:20 0:26:08 0:14:40 0:11:28 smithi master ubuntu 18.04 rados:cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/classic start} 2
fail 5970011 2021-03-16 05:27:23 2021-03-16 10:15:52 2021-03-16 11:49:16 1:33:24 1:25:51 0:07:33 smithi master rhel 8.3 rados:cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/rhel_8.3_kubic_stable} 2
Failure Reason:

SELinux denials found on ubuntu@smithi093.front.sepia.ceph.com: ['type=AVC msg=audit(1615890974.564:6950): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.885:9269): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7328): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8663): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891407.460:9191): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891026.821:7140): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6914): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891103.884:7549): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.567:7584): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891133.196:7727): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891257.460:8409): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=38155 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6856): avc: denied { read } for pid=35224 comm="node_exporter" name="eno1" dev="sysfs" ino=35259 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890970.806:6938): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6849): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.884:8749): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.884:7205): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.568:8919): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7719): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7331): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8901): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7868): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.634:8430): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.564:8904): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891197.460:8136): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6963): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.567:8727): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.565:7709): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.760:9040): avc: denied { read } for pid=47807 comm="msgr-worker-1" path="pipe:[199172]" dev="pipefs" ino=199172 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.460:7345): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[329330]" dev="sockfs" ino=329330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6954): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.567:7713): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7218): avc: denied { read } for pid=35224 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.633:8429): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891415.884:9266): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.583:7319): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891253.884:8364): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891100.884:7510): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890971.442:6941): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9302): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6683): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.566:8390): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7648): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8718): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.459:8274): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.567:7923): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.503:8774): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.884:7167): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8896): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.084:7557): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.966:8737): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891323.150:8696): avc: denied { append } for pid=47807 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395849 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.885:9268): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8885): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891396.760:9037): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8485): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6948): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.564:8707): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7285): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891259.634:8431): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.884:6927): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7566): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.460:7343): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=35285 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.401:7260): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.131:9188): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.506:7463): avc: denied { write } for pid=26203 comm="ms_dispatch" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9158): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8519): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.564:8001): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.821:7163): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891249.616:8326): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.673:7859): avc: denied { search } for pid=26579 comm="mgr-fin" name="diff" dev="sda1" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.565:6957): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7698): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6800): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.460:7963): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=37445 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.567:6866): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6956): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7298): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891060.858:7347): avc: denied { read } for pid=26203 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.566:7232): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6944): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.803:6712): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6958): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6969): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.460:8035): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8710): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:8002): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9232): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.567:7314): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8689): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.566:8012): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.461:7691): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.236:7609): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.568:7929): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.880:8797): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.885:7869): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.460:7682): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7648): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891267.460:8525): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891098.825:7466): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.863:8052): avc: denied { read } for pid=45926 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890952.419:6736): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.602:6813): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.526:8860): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6682): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.884:8083): avc: denied { search } for pid=38417 comm="grafana-server" name="dashboards" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.885:8088): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.834:7502): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.884:6926): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891246.482:8266): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.884:7256): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.885:7258): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8474): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.566:8131): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.895:9270): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7653): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7566): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.567:7315): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891264.874:8505): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890950.419:6708): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.509:6899): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8887): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890952.431:6738): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8368): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.885:7287): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.568:8920): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891101.725:7518): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.673:7859): avc: denied { getattr } for pid=26579 comm="mgr-fin" name="UTC" dev="sda1" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.564:8470): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.885:7977): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.867:8513): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6754): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.820:7198): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7320): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.081:7605): avc: denied { append } for pid=52213 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.885:7977): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8313): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891397.460:9055): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890951.768:6732): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.884:8087): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.562:7969): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.697:9247): avc: denied { write } for pid=26579 comm="safe_timer" path="pipe:[150602]" dev="pipefs" ino=150602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.884:8021): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.566:8814): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891337.884:8847): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.564:8807): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8113): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.564:6845): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.884:6794): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.565:9238): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.651:8650): avc: denied { read } for pid=58052 comm="msgr-worker-2" path="socket:[235601]" dev="sockfs" ino=235601 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890970.806:6937): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.057:8441): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.566:8814): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.567:6868): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7716): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891107.460:7602): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[338426]" dev="sockfs" ino=338426 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.499:8025): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891177.550:7967): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.883:8820): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6752): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.884:7109): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.893:9111): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7705): avc: denied { read } for pid=35224 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890951.169:6723): avc: denied { write } for pid=26203 comm="safe_timer" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.883:7621): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.566:9170): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.803:6713): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891060.858:7348): avc: denied { remove_name } for pid=26203 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.515:6904): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6753): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.906:7264): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891100.885:7511): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7574): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.250:9189): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891105.835:7593): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8899): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891249.616:8328): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.567:7586): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7998): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891409.628:9206): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891250.864:8342): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8463): avc: denied { search } for pid=26579 comm="safe_timer" name="diff" dev="sda1" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891327.460:8787): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8129): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.880:8797): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891246.609:8268): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.506:7464): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891412.102:9221): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9300): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.879:8743): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.509:7247): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.459:8835): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9168): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7302): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.869:8398): avc: denied { add_name } for pid=26203 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.863:6664): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8116): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7300): avc: denied { read } for pid=35224 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.884:6819): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="sda1" ino=1444476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.884:8085): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8482): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.461:6809): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7509): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891202.663:8144): avc: denied { read } for pid=97309 comm="pgrep" name="status" dev="proc" ino=133131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890950.884:6715): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890950.803:6714): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7903): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891197.460:8142): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[357597]" dev="sockfs" ino=357597 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9230): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8487): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.884:6718): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891267.460:8529): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.250:7673): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.884:7208): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.564:9156): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.895:9271): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891258.632:8414): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.564:9233): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890953.058:6740): avc: denied { search } for pid=43516 comm="safe_timer" name="diff" dev="sda1" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891133.348:7730): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891100.834:7503): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891347.460:8924): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6759): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.515:6903): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8476): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.491:8773): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.567:8817): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.867:8513): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8713): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891267.460:8532): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=57387 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.426:8858): avc: denied { write } for pid=79238 comm="msgr-worker-0" laddr=172.21.15.93 lport=57150 faddr=172.21.15.93 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:8001): avc: denied { read } for pid=35224 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890967.461:6891): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.564:8906): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890966.515:6888): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.634:8104): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.537:7890): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7631): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9151): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.566:8724): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891175.848:7936): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7497): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891047.460:7342): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7130): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.565:7632): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.564:6946): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6849): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.566:8011): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891324.568:8730): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890963.808:6832): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891134.031:7733): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891406.884:9183): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6665): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891024.995:7089): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.980:8826): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891026.809:7136): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6670): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.567:9319): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.567:7921): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6856): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.407:6707): avc: denied { open } for pid=26579 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.496:7939): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8378): avc: denied { read } for pid=35224 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.567:9320): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9068): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.565:9235): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.515:6903): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7227): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.564:6952): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891105.835:7592): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.564:6854): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.883:8824): avc: denied { read } for pid=38417 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1444469 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891099.164:7473): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.568:7928): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7897): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.884:8878): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891412.885:9224): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.566:6861): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.564:7625): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891328.183:8793): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9251): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.588:8873): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.564:9159): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7655): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9146): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.225:8853): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="socket:[173603]" dev="sockfs" ino=173603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891409.628:9206): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.625:8396): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891099.023:7469): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6750): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7282): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.491:8704): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8715): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.579:7261): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.884:6925): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7575): avc: denied { read } for pid=35224 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.884:6927): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7571): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8907): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.583:6874): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.565:7224): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6802): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.568:7236): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891174.565:7917): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7994): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.523:6908): avc: denied { write } for pid=26579 comm="msgr-worker-1" laddr=172.21.15.93 lport=56204 faddr=172.21.15.93 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9054): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.567:8916): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891409.525:9205): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.881:8874): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891246.482:8267): avc: denied { read } for pid=52213 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6856): avc: denied { read } for pid=35224 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.568:8731): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891025.884:7103): avc: denied { search } for pid=38417 comm="grafana-server" name="dashboards" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891262.677:8451): avc: denied { open } for pid=100548 comm="pgrep" path="/proc/26179/status" dev="proc" ino=133131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.565:7309): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891127.863:7723): avc: denied { open } for pid=45926 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8520): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.564:9150): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7282): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.032:7273): avc: denied { read } for pid=47807 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.459:8278): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=44814 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9069): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.565:7629): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7497): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.883:8822): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.213:8652): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.581:7262): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.567:7924): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.491:8704): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891038.882:7252): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9146): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.499:8027): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.356:7141): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7328): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.884:9267): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8465): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8669): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8383): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.851:8082): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7506): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891202.663:8144): avc: denied { open } for pid=97309 comm="pgrep" path="/proc/26179/status" dev="proc" ino=133131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891100.089:7496): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.564:8712): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6917): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891134.474:7735): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891326.491:8773): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.091:7664): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.084:7555): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891099.164:7472): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.566:8386): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.884:8083): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.677:8307): avc: denied { getattr } for pid=26579 comm="mgr-fin" name="UTC" dev="sda1" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.479:8702): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8119): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.073:7186): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9148): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.851:8081): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.846:9048): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9278): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.566:6861): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9231): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.460:7596): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7912): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8122): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.491:8704): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.564:8898): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7103): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.479:8702): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.796:8078): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9232): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7294): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6766): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.866:8445): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891134.568:7741): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.683:9246): avc: denied { append } for pid=47807 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395849 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8800): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891183.477:7990): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891116.091:7665): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891116.091:7662): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.493:7897): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891259.884:8437): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.508:8096): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.884:6668): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6949): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8114): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9169): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.566:8388): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7230): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891103.884:7549): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7330): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.884:8315): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891337.459:8836): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891409.057:9201): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.460:7603): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[335813]" dev="sockfs" ino=335813 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891202.663:8146): avc: denied { open } for pid=97309 comm="pgrep" path="/proc/26203/status" dev="proc" ino=151909 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6806): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=45272 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.567:7588): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9279): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.099:8074): avc: denied { open } for pid=43516 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.032:7273): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7129): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891412.884:9223): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.565:7305): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35455 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891401.171:9112): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7653): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8115): avc: denied { read } for pid=35224 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.825:7466): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891028.884:7168): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.564:8905): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6948): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8719): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.091:7665): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891407.460:9195): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.432:8093): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.460:8045): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[350829]" dev="sockfs" ino=350829 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8913): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.032:7273): avc: denied { open } for pid=47807 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.881:8875): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8878): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.565:6962): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6764): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7896): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891259.214:8422): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="socket:[173603]" dev="sockfs" ino=173603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.834:7502): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.634:8103): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.966:8736): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.515:6902): avc: denied { search } for pid=26579 comm="safe_timer" name="diff" dev="sda1" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890963.582:6827): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="socket:[145385]" dev="sockfs" ino=145385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.460:7601): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=59506 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.513:8792): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8886): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890950.803:6712): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8125): avc: denied { read } for pid=35224 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7308): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/temp1_crit" dev="sysfs" ino=35463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6917): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891255.869:8398): avc: denied { create } for pid=26203 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.885:7512): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9149): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.566:9242): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9296): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8472): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.659:6710): avc: denied { read } for pid=26203 comm="msgr-worker-1" path="socket:[144296]" dev="sockfs" ino=144296 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891175.848:7934): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.884:8666): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891415.884:9264): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891323.963:8698): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891262.677:8453): avc: denied { read } for pid=100548 comm="pgrep" name="status" dev="proc" ino=151909 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.499:8027): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.673:7859): avc: denied { search } for pid=26579 comm="mgr-fin" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.564:7907): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7649): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.567:7314): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7570): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6683): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.884:9106): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.796:8078): avc: denied { open } for pid=52213 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6758): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891060.841:7346): avc: denied { open } for pid=26203 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.980:8827): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.864:6922): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.821:7139): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891027.460:7142): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6884): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891250.864:8342): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891338.987:8848): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891415.884:9263): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6853): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.460:7959): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891105.835:7594): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.633:8428): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.884:8668): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7131): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891178.884:7976): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.884:9108): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7231): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6683): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891032.663:7211): avc: denied { search } for pid=26579 comm="mgr-fin" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6762): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.032:7274): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8110): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891250.864:8341): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.564:8897): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.567:7583): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.677:8307): avc: denied { search } for pid=26579 comm="mgr-fin" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891339.987:8867): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.566:8392): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.567:6867): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891207.737:8150): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6765): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9150): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8720): avc: denied { read } for pid=35224 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.610:6815): avc: denied { read } for pid=85668 comm="pgrep" name="status" dev="proc" ino=133131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.099:8074): avc: denied { read } for pid=43516 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.850:8079): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.482:8267): avc: denied { open } for pid=52213 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891024.995:7089): avc: denied { read } for pid=58052 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6847): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.884:8436): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890948.395:6675): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.508:8097): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.564:7575): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.850:8079): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6671): avc: denied { read } for pid=38417 comm="grafana-server" name="radosgw-detail.json" dev="sda1" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.565:8383): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.805:6875): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.884:7866): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.884:7106): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.568:8921): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890970.806:6937): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.564:6945): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.879:7545): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9234): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9234): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.550:7967): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890967.461:6893): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891336.551:8832): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890970.806:6937): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.565:7918): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.661:8069): avc: denied { write } for pid=43516 comm="msgr-worker-0" laddr=172.21.15.93 lport=6804 faddr=172.21.15.93 fport=44240 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6917): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891028.833:7165): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.874:8504): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.009:8357): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.883:7620): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8516): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.467:8654): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7130): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.213:8652): avc: denied { read } for pid=52213 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6970): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7997): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.885:6929): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1444477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8121): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8799): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.865:8397): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.566:8724): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.236:7609): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891396.846:9048): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891179.562:7978): avc: denied { open } for pid=26579 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8690): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.565:7581): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8126): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.568:6810): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.565:8493): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891060.841:7346): avc: denied { add_name } for pid=26203 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.460:7143): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.568:7927): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.575:7248): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891262.679:8454): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6759): avc: denied { read } for pid=35224 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891412.884:9222): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.526:8860): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8367): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.565:7579): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.211:8262): avc: denied { write } for pid=26203 comm="safe_timer" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9300): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.884:8018): avc: denied { search } for pid=38417 comm="grafana-server" name="diff" dev="sda1" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891177.460:7958): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8481): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7290): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.183:7157): avc: denied { search } for pid=38417 comm="grafana-server" name="var" dev="sda1" ino=1966107 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891265.461:8510): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.833:7166): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.564:7626): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8124): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.211:8263): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891038.575:7248): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891134.567:7740): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.576:8871): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.451:8059): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7304): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8484): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891257.460:8403): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891398.083:9074): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891189.661:8067): avc: denied { write } for pid=43516 comm="tp_osd_tp" path="pipe:[186176]" dev="pipefs" ino=186176 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8914): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891403.108:9140): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.558:7161): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.564:7913): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.643:6655): avc: denied { write } for pid=43516 comm="tp_osd_tp" path="pipe:[186178]" dev="pipefs" ino=186178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.643:6656): avc: denied { read } for pid=43516 comm="msgr-worker-2" path="pipe:[186178]" dev="pipefs" ino=186178 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.145:7187): avc: denied { write } for pid=80233 comm="msgr-worker-0" laddr=172.21.15.93 lport=57204 faddr=172.21.15.93 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891183.203:7988): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="socket:[173603]" dev="sockfs" ino=173603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.566:6863): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6668): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8371): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6884): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7309): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6748): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6974): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.821:7163): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.262:7677): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.651:8647): avc: denied { write } for pid=58052 comm="tp_osd_tp" path="pipe:[224029]" dev="pipefs" ino=224029 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.882:9138): avc: denied { open } for pid=26579 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.879:8744): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9252): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.825:7466): avc: denied { open } for pid=47807 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6851): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.491:8704): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.834:7645): avc: denied { write } for pid=58052 comm="safe_timer" path="pipe:[224031]" dev="pipefs" ino=224031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7716): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.467:8655): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.460:8790): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[385330]" dev="sockfs" ino=385330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7564): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.697:7893): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.659:6660): avc: denied { search } for pid=26579 comm="mgr-fin" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891037.460:7242): avc: denied { search } for pid=45926 comm="prometheus" name="diff" dev="sda1" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891337.459:8838): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.583:6874): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.564:7292): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.760:9038): avc: denied { append } for pid=47807 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395849 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8903): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7214): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.796:8078): avc: denied { read } for pid=52213 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8115): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.067:7243): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.568:7721): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615890951.023:6722): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7298): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.884:8057): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891249.616:8328): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890948.407:6677): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.467:8654): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6960): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.567:9173): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891247.863:8311): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.460:8788): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.884:7208): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9279): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.884:8663): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891427.864:9325): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.690:8662): avc: denied { read } for pid=103325 comm="pgrep" name="status" dev="proc" ino=151909 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9171): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7572): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891134.246:7734): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.182:7871): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.885:7660): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="sda1" ino=1444468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.565:8008): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.182:7870): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9147): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7220): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.461:9063): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.100:9211): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.564:6948): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.816:8819): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.884:7548): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7653): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9308): avc: denied { read } for pid=35224 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9166): avc: denied { read } for pid=35224 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30786 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9251): avc: denied { search } for pid=26579 comm="safe_timer" name="diff" dev="sda1" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.508:8096): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.612:8302): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891267.460:8528): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.564:9310): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35455 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6959): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.565:7708): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.568:8918): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.884:8436): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.884:9106): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7320): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.564:7624): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.566:8010): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8312): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891398.083:9075): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890948.510:6678): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8481): avc: denied { read } for pid=35224 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.885:6720): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1444474 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.566:8389): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.460:7690): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[342122]" dev="sockfs" ino=342122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.659:6709): avc: denied { write } for pid=26579 comm="msgr-worker-1" laddr=172.21.15.93 lport=45952 faddr=172.21.15.93 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.508:8096): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891026.821:7139): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8371): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7909): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.562:7969): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.863:8310): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9057): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9155): avc: denied { read } for pid=35224 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.884:6795): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.819:7099): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.822:7335): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.825:7466): avc: denied { read } for pid=47807 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891105.835:7593): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.568:9175): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.906:8272): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.567:7587): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.833:7165): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.566:9241): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.884:8083): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891265.461:8511): avc: denied { open } for pid=52213 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9157): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.566:9317): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891247.884:8317): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.884:6671): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="sda1" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.503:8047): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891173.182:7870): avc: denied { read } for pid=47807 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.460:8782): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.805:6876): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.566:8724): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.661:8070): avc: denied { read } for pid=58052 comm="msgr-worker-1" path="socket:[235563]" dev="sockfs" ino=235563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8713): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7911): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.491:8704): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891326.588:8776): avc: denied { read } for pid=43516 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6965): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891104.567:7586): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.677:8307): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8121): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.507:7158): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891127.863:7724): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.805:6877): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.526:8861): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.997:8321): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7863): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.846:9049): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7509): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.570:8742): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.884:6718): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.223:8758): avc: denied { write } for pid=26203 comm="msgr-worker-2" laddr=172.21.15.93 lport=3300 faddr=172.21.15.99 fport=34748 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.565:9236): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.833:7165): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891180.849:7984): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6953): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890955.804:6789): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7910): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.704:8432): avc: denied { open } for pid=52213 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.050:7992): avc: denied { read } for pid=79238 comm="msgr-worker-1" path="pipe:[283283]" dev="pipefs" ino=283283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.867:8512): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.460:7686): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.834:7503): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891175.848:7935): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.491:8704): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891336.551:8831): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6848): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.459:8274): avc: denied { getattr } for pid=45926 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=196135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.460:7681): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.833:7165): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891321.960:8651): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8666): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8896): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.567:8815): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.805:6876): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.984:8319): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.200:7543): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891180.849:7983): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.566:8389): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6916): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.566:8915): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891412.884:9222): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.666:7326): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.567:8495): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891257.460:8405): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890967.461:6896): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[304777]" dev="sockfs" ino=304777 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891417.460:9291): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=53965 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8882): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.819:7099): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7508): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891133.336:7729): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8469): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7309): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891133.348:7730): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9276): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890963.808:6832): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.564:6847): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.224:7607): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.211:8265): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="socket:[173603]" dev="sockfs" ino=173603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.883:8820): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.770:7672): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.881:8876): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.659:6660): avc: denied { getattr } for pid=26579 comm="mgr-fin" name="UTC" dev="sda1" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.566:9316): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8690): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.564:6749): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890970.806:6940): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.262:6797): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6973): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.250:7674): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7218): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891336.563:8833): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7293): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.803:6711): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890950.884:6717): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.459:8844): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[381828]" dev="sockfs" ino=381828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8899): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.870:7250): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7330): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.884:8312): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.950:8448): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.843:7616): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891045.822:7332): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.565:7310): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8687): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891060.841:7346): avc: denied { write } for pid=26203 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.057:8440): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.581:7278): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890953.562:6745): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891398.083:9074): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.659:6660): avc: denied { search } for pid=26579 comm="mgr-fin" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9234): avc: denied { read } for pid=35224 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.885:6928): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7103): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891327.460:8791): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[387101]" dev="sockfs" ino=387101 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.884:7256): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.837:7650): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.760:9039): avc: denied { write } for pid=47807 comm="osd_srv_heartbt" path="pipe:[199172]" dev="pipefs" ino=199172 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.567:7584): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891398.082:9072): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891253.884:8364): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6682): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.834:7646): avc: denied { read } for pid=58052 comm="msgr-worker-2" path="pipe:[224031]" dev="pipefs" ino=224031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6682): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.565:7707): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891202.663:8146): avc: denied { read } for pid=97309 comm="pgrep" name="status" dev="proc" ino=151909 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891347.460:8922): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891402.088:9132): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.009:8358): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7303): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891265.885:8522): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444466 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891398.083:9075): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.566:7919): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891030.845:7201): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.564:7999): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.885:7869): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="sda1" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.566:9240): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.100:9210): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.567:7923): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.825:7466): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.567:8394): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9307): avc: denied { read } for pid=35224 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.460:7680): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.371:7189): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.906:7264): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.565:9235): avc: denied { read } for pid=35224 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8464): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891024.995:7091): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.874:8505): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891030.845:7201): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.565:7311): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.818:7642): avc: denied { append } for pid=47807 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395849 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.885:6796): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.820:7197): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.482:8266): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7997): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.704:8432): avc: denied { read } for pid=52213 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.568:7927): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.754:6688): avc: denied { open } for pid=52213 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.566:7232): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.851:7467): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8376): avc: denied { read } for pid=35224 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.460:8784): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.884:7209): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.499:8027): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.460:7683): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8476): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8668): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6669): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.885:8088): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891133.196:7726): avc: denied { write } for pid=26203 comm="safe_timer" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.200:7543): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891410.894:9214): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891326.503:8774): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.565:8488): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.508:8097): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891265.867:8515): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.885:7110): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="sda1" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891040.885:7258): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.565:6857): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9279): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.646:8105): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.673:7859): avc: denied { search } for pid=26579 comm="mgr-fin" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891327.460:8789): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=35548 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8888): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891177.460:7959): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.460:7145): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7868): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6665): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.503:6843): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891397.884:9069): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.460:7600): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7998): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.566:8013): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891107.460:7599): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.566:9242): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891180.849:7984): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.642:6653): avc: denied { append } for pid=58052 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395852 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891180.502:7979): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891189.506:8061): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9300): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891032.832:7212): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.884:8747): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.224:7607): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.423:8092): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891192.754:8107): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8723): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.523:6907): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="pipe:[150602]" dev="pipefs" ino=150602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.460:7339): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.704:8432): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891405.894:9179): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8518): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.431:7613): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.884:6923): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.881:8875): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7568): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7648): avc: denied { search } for pid=26203 comm="safe_timer" name="diff" dev="sda1" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.236:7609): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.565:7224): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7894): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.564:6752): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.612:8299): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.567:6865): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.895:9270): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8367): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8374): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7630): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6964): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8716): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.884:7169): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.850:8034): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.515:6902): avc: denied { read } for pid=26579 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7633): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891257.460:8411): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[364403]" dev="sockfs" ino=364403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6762): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8111): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8316): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.874:8503): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.565:7228): avc: denied { read } for pid=35224 comm="node_exporter" name="temp1_crit" dev="sysfs" ino=35463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.565:8811): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.884:7206): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8463): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.576:8869): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.443:6790): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8370): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.885:8521): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890951.607:6731): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.568:7233): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8478): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.249:7638): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891178.884:7975): avc: denied { search } for pid=38417 comm="grafana-server" name="dashboards" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9302): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9065): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6917): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891116.091:7665): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.884:7107): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8373): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891417.461:9294): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7633): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.884:6923): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9303): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9070): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7107): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891197.460:8139): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8719): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6850): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.566:9244): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.564:8711): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7330): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6798): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.091:7664): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.099:8074): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891405.893:9178): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8720): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.805:6875): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8717): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.564:8710): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9172): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.610:6817): avc: denied { open } for pid=85668 comm="pgrep" path="/proc/26203/status" dev="proc" ino=151909 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.895:9271): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.845:7203): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="pipe:[150602]" dev="pipefs" ino=150602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6670): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.188:7542): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.970:8778): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.564:7906): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8381): avc: denied { read } for pid=35224 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.455:6793): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890967.461:6898): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.565:8810): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9068): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891133.884:7731): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891417.460:9290): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.610:8048): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.885:8521): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.565:9163): avc: denied { read } for pid=35224 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891134.474:7735): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.612:8301): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.564:7293): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.564:7697): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.250:7674): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.262:7676): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8517): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.493:7897): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891417.460:9287): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8385): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7318): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891259.214:8421): avc: denied { write } for pid=26203 comm="msgr-worker-2" laddr=172.21.15.93 lport=3300 faddr=172.21.15.99 fport=34748 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.503:6843): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.460:7146): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.885:7660): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890959.575:6812): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.884:6883): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7104): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.567:7586): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.612:8302): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891398.083:9074): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.565:7916): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9058): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891133.336:7728): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.634:8103): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6803): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6952): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.460:8281): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7863): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891336.563:8833): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8112): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.061:8458): avc: denied { write } for pid=52213 comm="safe_timer" path="pipe:[210412]" dev="pipefs" ino=210412 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9295): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890963.580:6821): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891339.526:8861): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.874:8505): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891416.108:9279): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891179.562:7978): avc: denied { read } for pid=26579 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.566:7711): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.885:6928): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891175.848:7934): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.884:8083): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.566:8813): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8115): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.673:7859): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.874:8504): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.762:6661): avc: denied { read } for pid=52213 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.848:7102): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.565:7709): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6879): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.885:8400): avc: denied { remove_name } for pid=26203 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891060.841:7346): avc: denied { create } for pid=26203 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.598:8029): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.558:7162): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891259.884:8439): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444470 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.884:7207): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.565:8911): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.566:7637): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.564:7216): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6808): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[302080]" dev="sockfs" ino=302080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.895:9270): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.884:9106): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.884:7547): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.506:8062): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.564:7297): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.884:7550): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6747): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7224): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7714): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891105.835:7592): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891024.995:7089): avc: denied { open } for pid=58052 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.885:8089): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.883:8822): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.864:8054): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.704:8432): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.566:8390): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8668): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.527:6911): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.697:9248): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="pipe:[150602]" dev="pipefs" ino=150602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.504:8060): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9059): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891411.423:9219): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8109): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8380): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.410:7457): avc: denied { append } for pid=26579 comm="log" path="/var/log/ceph/ceph-mgr.smithi093.jizkny.log" dev="sda1" ino=395821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891330.975:8798): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.564:7221): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890948.407:6677): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.558:7161): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.805:6878): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.419:6708): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891037.460:7242): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.169:7562): avc: denied { search } for pid=43516 comm="safe_timer" name="diff" dev="sda1" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891256.045:8402): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.892:9109): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.100:9211): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891267.460:8533): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[368108]" dev="sockfs" ino=368108 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7699): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.944:9255): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7865): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7131): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891028.507:7159): avc: denied { append } for pid=58052 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395852 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.030:7537): avc: denied { write } for pid=26579 comm="safe_timer" path="pipe:[150602]" dev="pipefs" ino=150602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.275:8024): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8375): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7494): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891339.526:8860): avc: denied { open } for pid=47807 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.612:8299): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891259.884:8434): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.565:6859): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7320): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.564:8801): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.087:9130): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.633:8428): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.843:7615): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.565:8492): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891344.565:8912): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.459:8273): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.885:7869): avc: denied { read } for pid=38417 comm="grafana-server" name="radosgw-detail.json" dev="sda1" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891030.820:7197): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890967.461:6894): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8379): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9060): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=52114 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.515:6902): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891323.580:8697): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9055): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.690:8660): avc: denied { read } for pid=103325 comm="pgrep" name="status" dev="proc" ino=133131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.885:6928): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7506): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.170:7563): avc: denied { read } for pid=43516 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.863:8052): avc: denied { open } for pid=45926 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.226:9227): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.819:7098): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7103): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891183.203:7987): avc: denied { write } for pid=26203 comm="msgr-worker-2" laddr=172.21.15.93 lport=3300 faddr=172.21.15.99 fport=34748 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.884:9263): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.885:8090): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="sda1" ino=1444477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891257.460:8408): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7317): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891328.183:8794): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.610:8030): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9145): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.884:8020): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.565:7227): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890977.459:6975): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=52754 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7506): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891407.460:9198): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[399909]" dev="sockfs" ino=399909 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6749): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8882): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.564:7626): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.086:9103): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.669:6912): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.565:9312): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.566:6770): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6945): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.062:8462): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="socket:[217524]" dev="sockfs" ino=217524 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.690:8662): avc: denied { open } for pid=103325 comm="pgrep" path="/proc/26203/status" dev="proc" ino=151909 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.565:7915): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.566:8391): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615890974.564:6951): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891328.884:8796): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8472): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.467:8653): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.893:9110): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7908): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.565:7706): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891197.460:8141): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[357065]" dev="sockfs" ino=357065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7285): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.460:8785): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.565:9312): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.565:9315): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8880): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890948.395:6675): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.566:9316): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9152): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7131): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.565:8483): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.659:6660): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.564:7291): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6850): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.906:7329): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891249.741:8330): avc: denied { open } for pid=43516 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8801): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891249.616:8328): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8378): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7319): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891246.211:8261): avc: denied { append } for pid=26203 comm="log" path="/var/log/ceph/ceph-mon.smithi093.log" dev="sda1" ino=395819 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.460:9191): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6801): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.884:8747): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.455:6792): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8477): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7698): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8708): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7218): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6807): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[297921]" dev="sockfs" ino=297921 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.086:9102): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.565:9160): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8808): avc: denied { read } for pid=35224 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6955): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.819:7101): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891341.423:8893): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.467:8654): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.884:6665): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.567:8816): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7863): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7128): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.892:9109): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6752): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891207.675:8149): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891249.741:8329): avc: denied { search } for pid=43516 comm="safe_timer" name="diff" dev="sda1" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.612:8302): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.567:7714): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.460:8037): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.423:8353): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891127.863:7723): avc: denied { read } for pid=45926 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.870:7249): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:8005): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.565:6858): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.491:6841): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8803): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891336.563:8833): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.884:8312): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.564:9229): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.821:7255): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.567:9320): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.005:7253): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6682): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.460:7148): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=41312 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890951.023:6721): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.567:8133): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8111): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8463): avc: denied { read } for pid=26579 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.883:8824): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1444469 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.565:8006): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8372): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.567:8916): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.490:7872): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.894:9139): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.564:9230): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.643:6658): avc: denied { write } for pid=47807 comm="msgr-worker-0" laddr=172.21.15.93 lport=6812 faddr=172.21.15.93 fport=49114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891133.884:7732): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891175.848:7935): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890963.580:6821): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.843:7615): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.566:7312): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891408.919:9200): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9056): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:8001): avc: denied { read } for pid=35224 comm="node_exporter" name="eno1" dev="sysfs" ino=35259 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.061:8459): avc: denied { read } for pid=52213 comm="msgr-worker-2" path="pipe:[210412]" dev="pipefs" ino=210412 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890967.461:6891): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.866:8445): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.990:8888): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.990:8888): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.884:6882): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.583:6871): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.943:7661): avc: denied { read } for pid=58052 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7656): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.250:7675): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.176:7475): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7906): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.834:7503): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.850:8079): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.566:7232): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6883): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.142:6836): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.885:9071): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444469 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9279): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.564:8477): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.262:6797): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.850:8080): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.622:8362): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9305): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7283): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9301): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9228): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7578): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7569): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.460:7965): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[355609]" dev="sockfs" ino=355609 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7298): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7700): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.659:6818): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890957.460:6799): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.564:6852): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.892:9109): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.262:7676): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891341.817:8895): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.084:7558): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.564:9311): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.099:8074): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.583:9176): avc: denied { write } for pid=35224 comm="node_exporter" path="socket:[198052]" dev="sockfs" ino=198052 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.459:8279): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[365541]" dev="sockfs" ino=365541 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.460:7597): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.610:6816): avc: denied { getattr } for pid=85668 comm="pgrep" path="/proc/26203" dev="proc" ino=151886 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.262:7676): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.884:6879): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.884:6665): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.443:6791): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7658): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891032.663:7211): avc: denied { search } for pid=26579 comm="mgr-fin" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891397.080:9052): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8318): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="sda1" ino=1444467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890950.884:6716): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.461:8046): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8383): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7215): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891024.995:7089): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.970:8778): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.144:7093): avc: denied { write } for pid=80233 comm="safe_timer" path="pipe:[288025]" dev="pipefs" ino=288025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.460:7596): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.565:6760): avc: denied { read } for pid=35224 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.567:7924): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890967.461:6892): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.460:7344): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[324248]" dev="sockfs" ino=324248 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.583:6873): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8377): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.567:9321): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6855): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.032:7273): avc: denied { search } for pid=47807 comm="safe_timer" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891177.194:7956): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8668): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.541:8643): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8722): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.589:7639): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.931:9217): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8376): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.820:7199): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.565:9163): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.506:8061): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890966.503:6886): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.884:8747): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.884:8055): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.805:6875): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.610:8030): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.564:9143): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.573:8496): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.061:8460): avc: denied { append } for pid=52213 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.690:8659): avc: denied { getattr } for pid=103325 comm="pgrep" path="/proc/26179" dev="proc" ino=133127 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.837:7652): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891412.102:9221): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891397.884:9070): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891396.845:9047): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7896): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891177.203:7957): avc: denied { write } for pid=26203 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7497): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.460:8036): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.459:8276): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8667): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.884:8086): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.564:7568): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6882): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7320): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.460:7681): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890969.126:6935): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8901): avc: denied { read } for pid=35224 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8117): avc: denied { read } for pid=35224 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6760): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.460:7964): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[353588]" dev="sockfs" ino=353588 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.884:6819): avc: denied { read } for pid=38417 comm="grafana-server" name="rbd-details.json" dev="sda1" ino=1444476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891194.564:8110): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.567:8729): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.567:7922): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890970.806:6939): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.646:8105): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891027.460:7143): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891202.663:8144): avc: denied { search } for pid=97309 comm="pgrep" name="26179" dev="proc" ino=133127 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8369): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890970.806:6937): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7908): avc: denied { read } for pid=35224 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7864): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.809:6913): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.499:8025): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.884:8056): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891202.663:8146): avc: denied { search } for pid=97309 comm="pgrep" name="26203" dev="proc" ino=151886 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.508:8095): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.565:8812): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7496): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891396.760:9037): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6844): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7628): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.460:9197): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[399116]" dev="sockfs" ino=399116 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891267.460:8534): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[373996]" dev="sockfs" ino=373996 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.867:8447): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.575:7248): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891326.865:8777): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8119): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.565:6857): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.567:6869): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891044.565:7303): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890955.804:6789): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.568:7235): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.420:8855): avc: denied { append } for pid=52213 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.885:7289): avc: denied { read } for pid=38417 comm="grafana-server" name="radosgw-overview.json" dev="sda1" ino=1444474 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.881:8877): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6955): avc: denied { read } for pid=35224 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8687): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890966.515:6888): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.459:8277): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890969.127:6936): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890963.579:6820): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6953): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891335.879:8829): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891417.460:9289): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.566:6771): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.885:9268): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7320): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891260.638:8443): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891325.879:8743): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891397.884:9065): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.486:7476): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7995): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.523:6906): avc: denied { write } for pid=26579 comm="safe_timer" path="pipe:[150602]" dev="pipefs" ino=150602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8717): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.589:7641): avc: denied { read } for pid=47807 comm="msgr-worker-2" path="socket:[204493]" dev="sockfs" ino=204493 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9154): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6943): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.526:8860): avc: denied { read } for pid=47807 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.884:8438): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.568:6810): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.566:6771): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6968): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.886:6930): avc: denied { read } for pid=52213 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.499:7972): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.093:8467): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890966.503:6886): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7905): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.984:8320): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7290): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.526:8860): avc: denied { search } for pid=47807 comm="safe_timer" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.564:7221): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.863:8309): avc: denied { open } for pid=45926 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.857:7238): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.145:7096): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="socket:[281414]" dev="sockfs" ino=281414 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8490): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.884:6924): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.884:7867): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891325.884:8748): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.850:8034): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.965:7266): avc: denied { append } for pid=52213 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.565:7706): avc: denied { read } for pid=35224 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.846:9048): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.884:6923): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.565:7915): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.461:7966): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6916): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.568:7927): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6761): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7108): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.078:7275): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.796:8077): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6749): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891197.460:8138): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9228): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.589:7639): avc: denied { read } for pid=43516 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891029.999:7185): avc: denied { read } for pid=58052 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.566:7313): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7497): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.503:6843): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.966:8736): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.884:8883): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8909): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.099:8074): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9278): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.460:7150): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[318462]" dev="sockfs" ino=318462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7497): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.564:7908): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.091:7662): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890967.461:6897): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[307592]" dev="sockfs" ino=307592 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7507): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891250.864:8343): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.583:6871): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.805:6876): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7699): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891250.864:8341): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.879:8743): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.566:7313): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.183:7971): avc: denied { search } for pid=38417 comm="grafana-server" name="var" dev="sda1" ino=1966107 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.565:6762): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.160:8091): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.661:8066): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.884:9107): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.460:8043): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=59425 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.565:8007): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.565:9312): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.884:7658): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7317): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890956.443:6790): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:8004): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6885): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444470 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.275:8024): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.883:7620): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891047.460:7337): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.460:7341): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.867:8513): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8885): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.643:6654): avc: denied { write } for pid=58052 comm="tp_osd_tp" path="pipe:[224030]" dev="pipefs" ino=224030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.943:7661): avc: denied { open } for pid=58052 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.567:7590): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.564:6948): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6917): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.566:7634): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.021:8361): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.965:7270): avc: denied { read } for pid=52213 comm="msgr-worker-0" path="pipe:[210410]" dev="pipefs" ino=210410 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.405:8868): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8909): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7494): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891267.460:8530): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.182:7870): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.460:8783): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891347.460:8923): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.885:7287): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891257.678:8413): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.032:7274): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.224:7608): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.202:7857): avc: denied { write } for pid=26203 comm="msgr-worker-2" laddr=172.21.15.93 lport=3300 faddr=172.21.15.99 fport=34748 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7897): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.564:8709): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.643:6659): avc: denied { read } for pid=43516 comm="msgr-worker-0" path="socket:[233152]" dev="sockfs" ino=233152 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.697:9249): avc: denied { write } for pid=26579 comm="msgr-worker-1" laddr=172.21.15.93 lport=45948 faddr=172.21.15.93 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8126): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891204.564:8147): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890955.565:6788): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891323.150:8695): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7230): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9164): avc: denied { read } for pid=35224 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.084:7558): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.565:7917): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891106.087:7595): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.883:7620): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7629): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891399.888:9101): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.262:7676): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7627): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.822:7333): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.919:9216): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.820:7196): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.499:8026): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.565:9239): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891397.884:9066): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891406.884:9184): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.564:7623): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.202:7855): avc: denied { write } for pid=26203 comm="safe_timer" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6681): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.565:7627): avc: denied { read } for pid=35224 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.874:8505): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891398.083:9075): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.565:6859): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.088:9131): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.564:7575): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7497): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9304): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.105:9256): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7573): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.884:6794): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.105:9226): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.565:8721): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.760:9037): avc: denied { open } for pid=47807 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8382): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7569): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8667): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.583:7930): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7219): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891105.018:7591): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.634:8064): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891328.183:8794): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.884:7654): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.884:8317): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.980:8826): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.874:8505): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.566:9318): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.990:8888): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.565:7224): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7630): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.568:7720): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891101.423:7517): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.182:7871): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7301): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.207:7606): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.874:8505): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.811:6917): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.646:8105): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9148): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891099.086:7470): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.455:6792): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8878): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8898): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.567:7587): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.565:9160): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8113): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.564:8711): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7868): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.567:8726): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891411.442:9220): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.460:8044): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[347879]" dev="sockfs" ino=347879 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8689): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891030.845:7202): avc: denied { write } for pid=26579 comm="safe_timer" path="pipe:[150602]" dev="pipefs" ino=150602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.879:8743): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.691:9322): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919855 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.032:7273): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.895:9270): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.460:7144): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.550:7968): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.883:8820): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.885:7289): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1444474 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7577): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.461:7151): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890963.925:6833): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.821:7164): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891427.864:9324): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.460:7689): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[338646]" dev="sockfs" ino=338646 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7328): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891024.995:7090): avc: denied { append } for pid=58052 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395852 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7296): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7997): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.708:8433): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8908): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.021:8360): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891263.749:8456): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.236:7610): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891040.884:7257): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890951.169:6724): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891105.835:7593): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.145:7094): avc: denied { read } for pid=80233 comm="msgr-worker-0" path="pipe:[288025]" dev="pipefs" ino=288025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7319): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.566:9167): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.610:6815): avc: denied { open } for pid=85668 comm="pgrep" path="/proc/26179/status" dev="proc" ino=133131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.885:7288): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.565:7302): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6762): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7867): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.578:7254): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891412.885:9224): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.100:9209): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891180.849:7984): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891398.083:9075): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891396.760:9037): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.567:7921): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.567:8729): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8663): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7717): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.863:6662): avc: denied { open } for pid=45926 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891175.848:7935): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.568:7237): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891194.564:8108): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6972): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7225): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35455 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7895): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891347.460:8925): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.885:7511): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.566:7635): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891324.565:8717): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.568:8730): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.885:7977): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.565:7306): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7912): avc: denied { read } for pid=35224 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9147): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.183:7971): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.565:7579): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8910): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8474): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.983:7468): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891267.460:8525): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.460:8782): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.515:6901): avc: denied { append } for pid=26579 comm="log" path="/var/log/ceph/ceph-mgr.smithi093.jizkny.log" dev="sda1" ino=395821 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8371): avc: denied { read } for pid=35224 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9308): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6765): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7292): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.460:8845): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8480): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.564:7625): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.884:8019): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8317): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.567:9320): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891326.223:8756): avc: denied { write } for pid=26203 comm="safe_timer" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6747): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6947): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.884:7863): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.943:9251): avc: denied { open } for pid=26579 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.183:7157): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7131): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.563:7902): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7897): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891189.506:8061): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.884:6926): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891036.571:7239): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891410.894:9214): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891398.083:9074): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891403.884:9142): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891262.677:8450): avc: denied { getattr } for pid=100548 comm="pgrep" path="/proc/26179" dev="proc" ino=133127 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.250:7674): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.565:8811): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.459:8843): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[388483]" dev="sockfs" ino=388483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:8002): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.461:8511): avc: denied { read } for pid=52213 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9150): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.491:8772): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891336.563:8833): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891321.651:8648): avc: denied { read } for pid=47807 comm="msgr-worker-0" path="pipe:[199171]" dev="pipefs" ino=199171 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891417.460:9293): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[403987]" dev="sockfs" ino=403987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891328.183:8795): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.566:8012): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8464): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.885:7511): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.565:9237): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.884:8749): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891257.460:8407): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8384): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891267.460:8527): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.588:8776): avc: denied { open } for pid=43516 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9230): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8120): avc: denied { read } for pid=35224 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.564:9309): avc: denied { read } for pid=35224 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6915): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891175.848:7934): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7303): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891250.864:8342): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.809:7137): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7564): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.460:7687): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7106): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6881): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7298): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.202:7858): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="socket:[173603]" dev="sockfs" ino=173603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.460:7960): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7307): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.084:7555): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891047.460:7338): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891417.077:9284): avc: denied { search } for pid=58052 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6962): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7506): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.564:9150): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890966.503:6887): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.567:7920): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7997): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891336.551:8831): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.821:7255): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.677:8307): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891416.108:9278): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891406.907:9187): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891197.460:8134): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.919:9215): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.850:8080): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.069:8442): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.563:6942): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.567:8014): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.567:8817): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891412.931:9225): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7704): avc: denied { read } for pid=35224 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.833:7200): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.576:8870): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891417.460:9286): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7716): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891112.884:7622): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7866): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.566:8132): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.728:8363): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.631:9213): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8489): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.567:8133): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.126:9258): avc: denied { open } for pid=43516 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890955.565:6788): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890956.885:6796): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7566): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.407:6707): avc: denied { read } for pid=26579 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.836:7614): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8709): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891412.884:9222): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8714): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.568:7234): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9298): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.980:8826): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7629): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.523:6909): avc: denied { read } for pid=26579 comm="msgr-worker-2" path="socket:[147271]" dev="sockfs" ino=147271 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7649): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8486): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.867:8446): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.931:9217): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.467:8654): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.886:6930): avc: denied { open } for pid=52213 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.224:9053): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.646:8105): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891103.884:7548): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890950.803:6711): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9297): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6666): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890963.808:6832): avc: denied { open } for pid=47807 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6805): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:8003): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.214:8420): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.459:8839): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7311): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.822:7333): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.567:8494): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6947): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891255.869:8398): avc: denied { open } for pid=26203 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8898): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8913): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.565:8007): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.459:8274): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.565:7579): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.578:7254): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.565:9161): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6683): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.564:7295): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.030:7539): avc: denied { write } for pid=26579 comm="msgr-worker-1" laddr=172.21.15.93 lport=45948 faddr=172.21.15.93 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.884:7551): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444466 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.885:7110): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7215): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.612:8301): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891100.834:7502): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891398.083:9075): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.568:7234): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.491:6842): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7696): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.884:7256): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891249.741:8330): avc: denied { read } for pid=43516 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.503:6843): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8463): avc: denied { open } for pid=26579 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891405.893:9178): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6804): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891248.603:8322): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891024.995:7091): avc: denied { read } for pid=58052 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8472): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7222): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.943:7661): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.164:7472): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7496): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890949.557:6680): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890955.804:6789): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891250.864:8341): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.564:8806): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891336.511:8830): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.565:9238): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.565:9313): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.510:7465): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890963.652:6829): avc: denied { read } for pid=43516 comm="msgr-worker-0" path="pipe:[186176]" dev="pipefs" ino=186176 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9144): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.277:7276): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9300): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8516): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.884:6884): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7907): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7292): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.460:9196): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=56009 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.562:7970): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.188:7542): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.884:8664): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891177.194:7956): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6947): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891180.849:7985): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890970.806:6938): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8690): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.565:8384): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8807): avc: denied { read } for pid=35224 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.557:7160): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8488): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7651): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.770:7672): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6951): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8112): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.816:8734): avc: denied { open } for pid=43516 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.970:8780): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.965:7268): avc: denied { write } for pid=58052 comm="tp_osd_tp" path="pipe:[224031]" dev="pipefs" ino=224031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.884:7510): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.882:9104): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.526:8861): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8481): avc: denied { read } for pid=35224 comm="node_exporter" name="eno1" dev="sysfs" ino=35259 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7227): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891260.866:8445): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890963.808:6832): avc: denied { read } for pid=47807 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.575:8733): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.565:9313): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8474): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.460:8042): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891323.150:8695): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6768): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8475): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.619:8355): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.020:7092): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8479): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.567:8133): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6955): avc: denied { read } for pid=35224 comm="node_exporter" name="eno1" dev="sysfs" ino=35259 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7905): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.659:6660): avc: denied { search } for pid=26579 comm="mgr-fin" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.881:8875): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891341.442:8894): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.566:7919): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.460:8038): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.866:8445): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.984:8319): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.565:9239): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891415.885:9268): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891194.566:8131): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891102.954:7527): avc: denied { open } for pid=58052 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8904): avc: denied { read } for pid=35224 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891040.821:7255): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891257.460:8406): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890957.460:6799): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9304): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891321.651:8649): avc: denied { write } for pid=58052 comm="msgr-worker-0" laddr=172.21.15.93 lport=6828 faddr=172.21.15.99 fport=38506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8888): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891045.822:7332): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891185.850:8034): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.069:6689): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.984:8319): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.884:8749): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.690:8660): avc: denied { search } for pid=103325 comm="pgrep" name="26179" dev="proc" ino=133127 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.762:6661): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6943): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.858:9050): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.460:8041): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891134.566:7739): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.576:8870): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7896): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.009:8358): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.760:9037): avc: denied { read } for pid=47807 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.673:7859): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.426:8857): avc: denied { read } for pid=79238 comm="msgr-worker-0" path="pipe:[283282]" dev="pipefs" ino=283282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.884:8083): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8464): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.884:7546): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891103.487:7544): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8712): avc: denied { read } for pid=35224 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890951.423:6725): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7574): avc: denied { read } for pid=35224 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.562:7969): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.564:6757): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890966.808:6890): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8373): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.568:8732): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891098.851:7467): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.460:7685): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8108): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.612:8301): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.566:8393): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891261.443:8449): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.499:7972): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891134.568:7742): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.410:7456): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="socket:[243091]" dev="sockfs" ino=243091 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.843:7616): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891397.460:9062): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[401840]" dev="sockfs" ino=401840 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.583:6874): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.508:8097): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890948.553:6679): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6755): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.567:8494): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.883:8823): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891030.820:7197): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.884:9263): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.564:6755): avc: denied { read } for pid=35224 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.882:9104): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.564:7624): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891398.083:9073): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.943:9251): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7653): avc: denied { search } for pid=38417 comm="grafana-server" name="dashboards" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.564:7576): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.100:9211): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890949.557:6680): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.589:7639): avc: denied { open } for pid=43516 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.460:9194): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891257.460:8404): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9298): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.564:7996): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.884:8020): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7712): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8373): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.564:6952): avc: denied { read } for pid=35224 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.506:7462): avc: denied { write } for pid=26203 comm="msgr-worker-2" laddr=172.21.15.93 lport=3300 faddr=172.21.15.99 fport=34748 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.622:8395): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890955.565:6788): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.460:7688): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=35833 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891185.598:8028): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9070): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891398.083:9075): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7295): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.565:7710): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.567:6864): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.565:9315): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891197.460:8140): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=55659 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891107.460:7598): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7702): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891027.460:7149): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[320341]" dev="sockfs" ino=320341 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.214:8419): avc: denied { write } for pid=26203 comm="safe_timer" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.884:7169): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8690): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.893:9110): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.562:7969): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.885:7287): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.566:8131): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8474): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.686:9137): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891407.686:9199): avc: denied { search } for pid=26579 comm="mgr-fin" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8805): avc: denied { read } for pid=35224 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.565:7915): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7658): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891178.884:7975): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.884:7622): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.566:6772): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.882:7251): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.884:8084): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.997:8321): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.874:8502): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.650:8658): avc: denied { read } for pid=52213 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.885:6719): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891406.885:9185): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1444474 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891403.884:9142): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6916): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.567:7715): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.642:6652): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891417.460:9286): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.943:9253): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891266.109:8523): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8477): avc: denied { read } for pid=35224 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.822:7332): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7213): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.885:6928): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891405.894:9180): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8385): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.884:6717): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890967.461:6895): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=54987 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.567:8728): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8369): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7286): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9276): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.422:7612): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891027.662:7152): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890970.806:6938): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.091:7664): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.084:7556): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891026.821:7139): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.563:9306): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.479:8703): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.619:8356): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891398.082:9072): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.963:8690): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891410.919:9215): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9297): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.564:7623): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8879): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.762:6661): avc: denied { open } for pid=52213 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891123.032:7695): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919855 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9277): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.884:6923): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.281:7678): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.565:9314): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6958): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.760:9042): avc: denied { write } for pid=47807 comm="msgr-worker-0" laddr=172.21.15.93 lport=43064 faddr=172.21.15.93 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.884:9263): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8316): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7649): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7904): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8689): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891265.867:8514): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.895:9272): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891406.895:9186): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.182:7871): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9065): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.565:9238): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.819:7098): avc: denied { search } for pid=26203 comm="safe_timer" name="var" dev="sda1" ino=1442286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891424.564:9309): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891037.460:7242): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.564:7994): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8491): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891111.843:7615): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891134.568:7742): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.050:7991): avc: denied { write } for pid=79238 comm="ceph_timer" path="pipe:[283283]" dev="pipefs" ino=283283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.213:8652): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9149): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9055): avc: denied { getattr } for pid=45926 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=196135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.659:6660): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6851): avc: denied { read } for pid=35224 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.819:7100): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.565:6857): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.697:9250): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="socket:[151462]" dev="sockfs" ino=151462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.164:7472): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.885:8521): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891262.677:8451): avc: denied { read } for pid=100548 comm="pgrep" name="status" dev="proc" ino=133131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.884:7282): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.562:7969): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9165): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon1" dev="sysfs" ino=40891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.673:7859): avc: denied { search } for pid=26579 comm="mgr-fin" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7282): avc: denied { search } for pid=38417 comm="grafana-server" name="dashboards" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.564:8473): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6760): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891127.863:7725): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.568:7235): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8804): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.895:9271): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.565:7915): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6880): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.811:6916): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.564:6946): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.188:7541): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891134.566:7738): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8312): avc: denied { search } for pid=38417 comm="grafana-server" name="etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891397.884:9065): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.622:8050): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.803:6712): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891336.563:8834): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { search } for pid=26579 comm="safe_timer" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.885:7660): avc: denied { read } for pid=38417 comm="grafana-server" name="hosts-overview.json" dev="sda1" ino=1444468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.564:8000): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.565:9160): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891327.460:8786): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.086:9103): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.884:7657): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.566:6771): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.459:8837): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8909): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.566:7582): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.884:7105): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891405.893:9178): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6961): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8712): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6879): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.879:8746): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.650:8658): avc: denied { open } for pid=52213 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.894:9139): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.142:6836): avc: denied { open } for pid=43516 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.100:9209): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.509:6900): avc: denied { append } for pid=47807 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395849 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.460:8039): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.884:9266): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7215): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.583:9177): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[200963]" dev="sockfs" ino=200963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.163:6837): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7327): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8690): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891427.864:9323): avc: denied { open } for pid=45926 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.885:7511): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.884:8086): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6756): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.659:6660): avc: denied { search } for pid=26579 comm="mgr-fin" name="diff" dev="sda1" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.884:8665): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.459:8841): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.884:8399): avc: denied { read } for pid=26203 comm="rocksdb:high0" name="000022.sst" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.565:7632): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.566:6861): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.567:7316): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.884:9108): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891134.474:7736): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891178.499:7972): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891117.290:7679): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.821:7139): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7284): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6977): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[300790]" dev="sockfs" ino=300790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891403.884:9141): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891249.742:8331): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.589:7640): avc: denied { write } for pid=43516 comm="msgr-worker-2" laddr=172.21.15.93 lport=57606 faddr=172.21.15.93 fport=6816 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.482:8266): avc: denied { search } for pid=52213 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.884:7108): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.809:7137): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891183.429:7989): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919855 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.634:8103): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891262.677:8453): avc: denied { open } for pid=100548 comm="pgrep" path="/proc/26203/status" dev="proc" ino=151909 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.884:9265): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890951.560:6726): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.885:8088): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.508:8094): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891101.188:7516): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891047.460:7340): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6766): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.885:7977): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.884:8747): avc: denied { search } for pid=38417 comm="grafana-server" name="dashboards" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.515:6902): avc: denied { open } for pid=26579 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.610:6815): avc: denied { search } for pid=85668 comm="pgrep" name="26179" dev="proc" ino=133127 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.459:8280): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[366264]" dev="sockfs" ino=366264 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7130): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890959.298:6811): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.677:8307): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6851): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.634:8063): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.885:8090): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1444477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8716): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8384): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.819:7099): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9172): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.182:7870): avc: denied { open } for pid=47807 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.567:6865): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7128): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891265.885:8521): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890964.567:6870): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.564:6945): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7657): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.081:8464): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.537:7891): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { getattr } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.963:8689): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891401.410:9128): avc: denied { append } for pid=52213 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395850 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891401.739:9129): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.170:7563): avc: denied { open } for pid=43516 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.770:7671): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.894:9214): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.588:8775): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7698): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.610:8049): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.863:8309): avc: denied { read } for pid=45926 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8707): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.863:6662): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.566:7582): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.643:6657): avc: denied { write } for pid=58052 comm="msgr-worker-1" laddr=172.21.15.93 lport=44240 faddr=172.21.15.93 fport=6804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.819:7098): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8120): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.867:8446): avc: denied { search } for pid=26203 comm="safe_timer" name="mon.smithi093" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.213:8652): avc: denied { open } for pid=52213 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.884:7209): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.612:8302): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.612:8301): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.884:7108): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.554:7993): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891202.663:8143): avc: denied { getattr } for pid=97309 comm="pgrep" path="/proc/26179" dev="proc" ino=133127 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891328.183:8795): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891176.353:7938): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8711): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7223): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891417.460:9288): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890953.562:6744): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.884:7659): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891100.089:7495): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891415.962:9275): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.677:8307): avc: denied { search } for pid=26579 comm="mgr-fin" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891099.164:7471): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.567:9174): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891252.021:8360): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.966:8736): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891265.884:8516): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.564:7703): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891417.460:9292): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[400009]" dev="sockfs" ino=400009 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891256.045:8401): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.565:6961): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891028.558:7161): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.816:8734): avc: denied { read } for pid=43516 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.754:6688): avc: denied { read } for pid=52213 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.561:7190): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.622:8050): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.834:7647): avc: denied { write } for pid=58052 comm="msgr-worker-2" laddr=172.21.15.93 lport=46322 faddr=172.21.15.93 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6667): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.211:8264): avc: denied { write } for pid=26203 comm="msgr-worker-2" laddr=172.21.15.93 lport=3300 faddr=172.21.15.99 fport=34748 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.566:9243): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8127): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891177.460:7961): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.663:7263): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891114.564:7625): avc: denied { read } for pid=35224 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7103): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8484): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890963.582:6826): avc: denied { write } for pid=26203 comm="msgr-worker-2" laddr=172.21.15.93 lport=3300 faddr=172.21.15.93 fport=45948 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.646:8105): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.990:8887): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891246.482:8267): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9278): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.564:7995): avc: denied { read } for pid=35224 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.884:7868): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.564:7696): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.568:8918): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.867:8512): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.564:8470): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.970:8781): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.612:8302): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.566:8009): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.567:6867): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891060.858:7348): avc: denied { unlink } for pid=26203 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.460:9192): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9168): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891262.677:8453): avc: denied { search } for pid=100548 comm="pgrep" name="26203" dev="proc" ino=151886 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.566:9167): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.884:8364): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7896): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891259.884:8437): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.885:8884): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8900): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.126:9257): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891406.884:9182): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.088:9132): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.568:8919): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.834:7505): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.980:8827): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.885:8022): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1444474 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8887): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891260.638:8443): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.565:7580): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.874:8504): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.884:8663): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.089:7496): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891043.885:7289): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="sda1" ino=1444474 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891025.552:7097): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.091:7665): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891172.202:7856): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8516): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7217): avc: denied { read } for pid=35224 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6683): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890974.566:6967): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7130): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891027.460:7147): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.506:8076): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891262.871:8455): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891259.884:8438): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890954.565:6763): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6846): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8519): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.588:8872): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.872:8501): avc: denied { write } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.758:8308): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8490): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.565:8008): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.555:7131): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.236:7610): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.655:8444): avc: denied { open } for pid=52213 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8318): avc: denied { read } for pid=38417 comm="grafana-server" name="host-details.json" dev="sda1" ino=1444467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.863:6663): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.943:7661): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.223:8757): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="pipe:[132376]" dev="pipefs" ino=132376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.885:8400): avc: denied { unlink } for pid=26203 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.803:6711): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891098.851:7467): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.583:6874): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891189.661:8068): avc: denied { read } for pid=43516 comm="msgr-worker-0" path="pipe:[186176]" dev="pipefs" ino=186176 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.884:8055): avc: denied { search } for pid=38417 comm="grafana-server" name="/" dev="overlay" ino=1966098 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8314): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.724:9064): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890950.885:6719): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.690:8662): avc: denied { search } for pid=103325 comm="pgrep" name="26203" dev="proc" ino=151886 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891197.460:8135): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.482:8266): avc: denied { open } for pid=52213 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.686:9137): avc: denied { getattr } for pid=26579 comm="mgr-fin" name="UTC" dev="sda1" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.564:7217): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891177.460:7959): avc: denied { getattr } for pid=45926 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=196135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.885:8088): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.508:8094): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891031.884:7207): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.479:8657): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891347.460:8928): avc: denied { read } for pid=45926 comm="prometheus" path="socket:[387869]" dev="sockfs" ino=387869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.142:6836): avc: denied { read } for pid=43516 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7330): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890948.395:6675): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7320): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891415.885:9268): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.965:7271): avc: denied { write } for pid=52213 comm="msgr-worker-0" laddr=172.21.15.93 lport=39576 faddr=172.21.15.99 fport=6810 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.739:7619): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.069:8442): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.884:8365): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.564:9146): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7648): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9252): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.564:8802): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891181.298:7986): avc: denied { search } for pid=43516 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890948.395:6675): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.619:8355): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.943:9252): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7282): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.564:8002): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8118): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.565:8723): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8878): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8370): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6968): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.760:9043): avc: denied { read } for pid=43516 comm="msgr-worker-0" path="socket:[207100]" dev="sockfs" ino=207100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891260.867:8446): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.906:7330): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7701): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.634:8063): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891026.555:7131): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.567:7718): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.091:7664): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.567:7714): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7903): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8881): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8901): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.884:9267): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891267.460:8526): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8909): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8374): avc: denied { search } for pid=35224 comm="node_exporter" name="net" dev="proc" ino=161512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8888): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891115.828:7644): avc: denied { read } for pid=26579 comm="msgr-worker-2" path="socket:[235007]" dev="sockfs" ino=235007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.145:7095): avc: denied { write } for pid=80233 comm="msgr-worker-0" laddr=172.21.15.93 lport=57204 faddr=172.21.15.93 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.822:7333): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.837:7648): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891325.879:8744): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891347.460:8927): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[385851]" dev="sockfs" ino=385851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891099.176:7474): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890966.808:6890): avc: denied { write } for pid=26179 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.980:8827): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.564:7914): avc: denied { read } for pid=35224 comm="node_exporter" name="eno1" dev="sysfs" ino=35259 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891024.995:7091): avc: denied { open } for pid=58052 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9252): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7226): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.612:8302): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.566:9240): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891175.848:7937): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.850:8079): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.881:8874): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.460:9193): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890956.884:6794): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.885:7287): avc: denied { read open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891027.816:7156): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.119:7854): avc: denied { append } for pid=43516 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.564:7905): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.884:8087): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891116.091:7665): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891111.236:7609): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.565:6857): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890951.560:6727): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891194.564:8110): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891036.972:7241): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8883): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.610:8048): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.564:7294): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891041.442:7259): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891399.231:9097): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.695:8015): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6966): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891026.809:7137): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891178.499:7973): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891116.770:7672): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.567:7925): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891197.460:8134): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891260.057:8441): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.061:8461): avc: denied { write } for pid=52213 comm="msgr-worker-2" laddr=172.21.15.93 lport=56522 faddr=172.21.15.93 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890952.718:6739): avc: denied { search } for pid=52213 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.565:7308): avc: denied { read } for pid=35224 comm="node_exporter" name="temp1_crit" dev="sysfs" ino=35463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8714): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.549:7892): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891246.482:8266): avc: denied { read } for pid=52213 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.564:7565): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891407.250:9190): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891134.566:7738): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.564:8372): avc: denied { read } for pid=35224 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9297): avc: denied { search } for pid=35224 comm="node_exporter" name="7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.567:7588): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6767): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615891115.884:7658): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.032:7274): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.819:7098): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.564:8369): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8117): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7653): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.567:7719): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890963.652:6828): avc: denied { write } for pid=43516 comm="tp_osd_tp" path="pipe:[186176]" dev="pipefs" ino=186176 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.966:8737): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.881:8874): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890950.803:6711): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.508:8097): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891326.970:8779): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891176.618:7946): avc: denied { append } for pid=47807 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395849 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891045.822:7334): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.565:8491): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6879): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.493:7894): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891325.884:8747): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891102.954:7527): avc: denied { read } for pid=58052 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891249.616:8327): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.874:8502): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.884:6669): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890968.515:6903): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8914): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.549:7892): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891396.858:9051): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6769): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.564:8902): avc: denied { read } for pid=35224 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891105.835:7592): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891124.564:7702): avc: denied { read } for pid=35224 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.460:8040): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891250.864:8341): avc: denied { getattr } for pid=26203 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8914): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.885:7110): avc: denied { read } for pid=38417 comm="grafana-server" name="radosgw-detail.json" dev="sda1" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.567:7589): avc: denied { search } for pid=35224 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1615890953.562:6744): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891344.568:8917): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.565:8913): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.565:8484): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891415.126:9258): avc: denied { read } for pid=43516 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891036.571:7240): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.564:7567): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.821:7139): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891197.460:8137): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.564:6953): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891026.809:7138): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8475): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891334.565:8809): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.567:6868): avc: denied { search } for pid=35224 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890966.515:6889): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.884:8434): avc: denied { search } for pid=38417 comm="grafana-server" name="dashboards" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891262.677:8452): avc: denied { getattr } for pid=100548 comm="pgrep" path="/proc/26203" dev="proc" ino=151886 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.881:8874): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6847): avc: denied { read } for pid=35224 comm="node_exporter" name="stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.864:8053): avc: denied { getattr } for pid=45926 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8903): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.576:8870): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6750): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.030:7538): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="pipe:[150602]" dev="pipefs" ino=150602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9295): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8883): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.565:6761): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.567:7585): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.479:8656): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.811:6914): avc: denied { write } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890962.610:6814): avc: denied { getattr } for pid=85668 comm="pgrep" path="/proc/26179" dev="proc" ino=133127 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.874:8504): avc: denied { open } for pid=26179 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891100.834:7504): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891347.460:8926): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=49269 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891424.563:9299): avc: denied { read } for pid=35224 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891257.460:8410): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[367418]" dev="sockfs" ino=367418 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.884:8520): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.564:7222): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.760:9041): avc: denied { write } for pid=47807 comm="msgr-worker-1" laddr=172.21.15.93 lport=41750 faddr=172.21.15.93 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8128): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.564:9144): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891029.999:7185): avc: denied { open } for pid=58052 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.677:8307): avc: denied { search } for pid=26579 comm="mgr-fin" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891396.846:9048): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6848): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.100:9211): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891178.884:7975): avc: denied { getattr } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.564:8709): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173125 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.584:7324): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.564:8711): avc: denied { search } for pid=35224 comm="node_exporter" name="fs" dev="proc" ino=166890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891255.869:8398): avc: denied { write } for pid=26203 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.262:7676): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891177.562:7969): avc: denied { open } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.564:7567): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.515:6902): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.884:8055): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.564:9153): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.884:8021): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.565:9162): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.990:8887): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891334.883:8821): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc" dev="sda1" ino=1966104 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891260.655:8444): avc: denied { read } for pid=52213 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891416.108:9279): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.508:8097): avc: denied { write } for pid=26179 comm="conmon" name="socket" dev="tmpfs" ino=15670 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.884:6670): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.508:8097): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891194.565:8124): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.030:7540): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="socket:[151462]" dev="sockfs" ino=151462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.879:8744): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7704): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890962.610:6817): avc: denied { read } for pid=85668 comm="pgrep" name="status" dev="proc" ino=151909 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891410.931:9218): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9251): avc: denied { read } for pid=26579 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891427.864:9323): avc: denied { read } for pid=45926 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891036.571:7239): avc: denied { use } for pid=26203 comm="fn_monstore" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891340.884:8883): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.142:6835): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c605,c704 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891187.622:8051): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.213:8652): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6971): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891134.474:7737): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891042.965:7269): avc: denied { write } for pid=52213 comm="tp_osd_tp" path="pipe:[210411]" dev="pipefs" ino=210411 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891034.565:7228): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/temp1_crit" dev="sysfs" ino=35463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891202.663:8145): avc: denied { getattr } for pid=97309 comm="pgrep" path="/proc/26203" dev="proc" ino=151886 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891102.666:7520): avc: denied { search } for pid=26579 comm="mgr-fin" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.460:8036): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891400.882:9105): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891043.884:7286): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891104.564:7578): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891256.045:8401): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890965.583:6872): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891253.884:8366): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891044.583:7319): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891339.426:8856): avc: denied { write } for pid=79238 comm="safe_timer" path="pipe:[283282]" dev="pipefs" ino=283282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890949.557:6683): avc: denied { search } for pid=26179 comm="conmon" name="systemd" dev="tmpfs" ino=15380 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891339.224:8852): avc: denied { write } for pid=26203 comm="msgr-worker-2" laddr=172.21.15.93 lport=3300 faddr=172.21.15.99 fport=34748 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.565:7709): avc: denied { read } for pid=35224 comm="node_exporter" name="file-nr" dev="proc" ino=166891 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891104.566:7582): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891325.884:8749): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891190.885:8090): avc: denied { read } for pid=38417 comm="grafana-server" name="rbd-overview.json" dev="sda1" ino=1444477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891402.686:9137): avc: denied { search } for pid=26579 comm="mgr-fin" name="usr" dev="sda1" ino=658305 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891417.460:9285): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891173.537:7890): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6845): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891117.460:7684): avc: denied { setopt } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.563:8706): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.882:7251): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.566:6862): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7717): avc: denied { getattr } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891262.677:8451): avc: denied { search } for pid=100548 comm="pgrep" name="26179" dev="proc" ino=133127 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891190.850:8080): avc: denied { read } for pid=26203 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8317): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891116.091:7665): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891254.566:8387): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.965:7272): avc: denied { read } for pid=52213 comm="msgr-worker-2" path="socket:[230286]" dev="sockfs" ino=230286 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890965.884:6884): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.690:8661): avc: denied { getattr } for pid=103325 comm="pgrep" path="/proc/26203" dev="proc" ino=151886 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.368:7204): avc: denied { search } for pid=43516 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891030.145:7188): avc: denied { read } for pid=26579 comm="msgr-worker-1" path="socket:[281414]" dev="sockfs" ino=281414 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891115.884:7656): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890953.562:6746): avc: denied { sendto } for pid=26179 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.081:8463): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891251.433:8354): avc: denied { append } for pid=45926 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6751): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.943:9254): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.067:7243): avc: denied { open } for pid=47807 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.863:6662): avc: denied { read } for pid=45926 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890952.419:6737): avc: denied { search } for pid=26579 comm="safe_timer" name="libpod-8e1b649c9e84695ddec717166d64d4fe15612a756b12f48ded2f4b74b49ab3fe.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890954.564:6751): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890974.565:6963): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.568:7722): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891191.646:8106): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.093:8466): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.565:7229): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.564:6850): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891339.671:8865): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891253.884:8366): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.491:8705): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395485 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891254.565:8380): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891031.884:7210): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1444474 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.564:8113): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.564:7216): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.892:9109): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891404.564:9148): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891024.995:7089): avc: denied { search } for pid=58052 comm="safe_timer" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891034.564:7213): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="overlay" ino=1837666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.567:7712): avc: denied { read } for pid=35224 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891172.673:7859): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891340.884:8881): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891177.460:7962): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891415.931:9274): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891265.867:8512): avc: denied { search } for pid=26203 comm="safe_timer" name="/" dev="overlay" ino=1442275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c18,c323 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890948.395:6676): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.884:8318): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.459:8840): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.459:8842): avc: denied { getattr } for pid=45926 comm="prometheus" laddr=172.21.15.93 lport=47742 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.564:7701): avc: denied { search } for pid=35224 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891025.884:7108): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891344.564:8902): avc: denied { open } for pid=35224 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8123): avc: denied { search } for pid=35224 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891404.566:9171): avc: denied { search } for pid=35224 comm="node_exporter" name="user" dev="tmpfs" ino=15744 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891038.870:7249): avc: denied { open } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891337.884:8846): avc: denied { getattr } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891174.567:7926): avc: denied { search } for pid=35224 comm="node_exporter" name="host" dev="sda1" ino=1839637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c15,c798 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.462:8468): avc: denied { search } for pid=58052 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c441,c709 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891400.893:9110): avc: denied { open } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.493:7897): avc: denied { search } for pid=26179 comm="conmon" name="journal" dev="tmpfs" ino=15657 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891266.743:8524): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891194.565:8130): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9067): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891112.666:7618): avc: denied { read } for pid=26579 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891414.565:9239): avc: denied { search } for pid=35224 comm="node_exporter" name="1" dev="proc" ino=164429 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891322.690:8660): avc: denied { open } for pid=103325 comm="pgrep" path="/proc/26179/status" dev="proc" ino=133131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.564:7300): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891042.965:7267): avc: denied { append } for pid=58052 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395852 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891114.566:7636): avc: denied { search } for pid=35224 comm="node_exporter" name="kernel" dev="proc" ino=165804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891189.209:8058): avc: denied { search } for pid=47807 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890964.565:6860): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.724:9064): avc: denied { read } for pid=47807 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891402.882:9138): avc: denied { read } for pid=26579 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.460:7337): avc: denied { search } for pid=45926 comm="prometheus" name="etc" dev="sda1" ino=1966161 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890947.553:6648): avc: denied { write } for pid=26179 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891184.564:7995): avc: denied { open } for pid=35224 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6671): avc: denied { open } for pid=38417 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444473 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.515:6903): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891174.566:7919): avc: denied { read } for pid=35224 comm="node_exporter" name="mounts" dev="proc" ino=173135 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891187.884:8057): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.564:8473): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891322.963:8688): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891264.564:8471): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/7" dev="proc" ino=161506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891414.564:9231): avc: denied { read } for pid=35224 comm="node_exporter" name="fd" dev="proc" ino=173126 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891124.568:7720): avc: denied { search } for pid=35224 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891339.426:8859): avc: denied { read } for pid=26579 comm="msgr-worker-0" path="socket:[285055]" dev="sockfs" ino=285055 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891326.223:8759): avc: denied { read } for pid=26203 comm="msgr-worker-2" path="socket:[173603]" dev="sockfs" ino=173603 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.634:8102): avc: denied { search } for pid=26579 comm="safe_timer" name="/" dev="overlay" ino=1442294 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.659:6660): avc: denied { getattr } for pid=26579 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181439 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891406.094:9181): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615890962.610:6817): avc: denied { search } for pid=85668 comm="pgrep" name="26203" dev="proc" ino=151886 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891184.566:8010): avc: denied { search } for pid=35224 comm="node_exporter" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.459:8275): avc: denied { create } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891264.567:8494): avc: denied { read } for pid=35224 comm="node_exporter" name="entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.762:6661): avc: denied { search } for pid=52213 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c477,c738 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.460:9061): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[397752]" dev="sockfs" ino=397752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891397.884:9070): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891325.879:8745): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891100.834:7502): avc: denied { dac_read_search } for pid=26203 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891173.537:7890): avc: denied { read } for pid=26579 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891247.612:8300): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891324.567:8725): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167864 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891324.851:8735): avc: denied { search } for pid=47807 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c256,c539 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890977.459:6976): avc: denied { write } for pid=45926 comm="prometheus" path="socket:[300029]" dev="sockfs" ino=300029 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890968.527:6910): avc: denied { read } for pid=26579 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891047.460:7336): avc: denied { signal } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890952.431:6738): avc: denied { search } for pid=26579 comm="safe_timer" name="etc" dev="sda1" ino=1442300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c210,c353 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891116.091:7663): avc: denied { read } for pid=26179 comm="conmon" path="pipe:[126953]" dev="pipefs" ino=126953 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891415.895:9273): avc: denied { getattr } for pid=26203 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi093/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891103.884:7550): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891040.578:7254): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891030.561:7191): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="tmpfs" ino=15371 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891247.884:8315): avc: denied { read } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891267.460:8531): avc: denied { connect } for pid=45926 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615890947.884:6670): avc: denied { read } for pid=38417 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891259.884:8435): avc: denied { lock } for pid=38417 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966113 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c244,c879 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891252.009:8359): avc: denied { getattr } for pid=26579 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891191.508:8096): avc: denied { search } for pid=26179 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1615891044.564:7299): avc: denied { getattr } for pid=35224 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1615891347.460:8922): avc: denied { search } for pid=45926 comm="prometheus" name="/" dev="overlay" ino=1966151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c81,c625 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"']

pass 5970012 2021-03-16 05:27:24 2021-03-16 10:16:03 2021-03-16 10:52:32 0:36:29 0:24:47 0:11:42 smithi master ubuntu 20.04 rados:cephadm/with-work/{0-distro/ubuntu_20.04 fixed-2 mode/root mon_election/classic msgr/async-v1only start tasks/rados_python} 2
pass 5970013 2021-03-16 05:27:25 2021-03-16 10:17:03 2021-03-16 10:42:03 0:25:00 0:15:31 0:09:29 smithi master ubuntu 20.04 rados:cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/connectivity start} 2
pass 5970014 2021-03-16 05:27:26 2021-03-16 10:17:03 2021-03-16 10:53:14 0:36:11 0:24:21 0:11:50 smithi master ubuntu 20.04 rados:cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04-15.2.9 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/connectivity} 2
pass 5970015 2021-03-16 05:27:27 2021-03-16 10:17:54 2021-03-16 10:46:58 0:29:04 0:20:23 0:08:41 smithi master centos 8.2 rados:cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/connectivity task/test_cephadm} 1
pass 5970016 2021-03-16 05:27:28 2021-03-16 10:18:04 2021-03-16 11:18:00 0:59:56 0:49:20 0:10:36 smithi master centos 8.2 rados:cephadm/thrash/{0-distro/centos_8.2_kubic_stable 1-start 2-thrash 3-tasks/small-objects fixed-2 msgr/async-v1only root} 2
fail 5970017 2021-03-16 05:27:29 2021-03-16 10:18:44 2021-03-16 10:44:28 0:25:44 0:13:22 0:12:22 smithi master ubuntu 20.04 rados:cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_stable task/test_e2e} 2
Failure Reason:

Command failed (workunit test cephadm/create_iscsi_disks.sh) on smithi175 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && cd -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=087e4d3ce254d47d802042553efd1f0d0fcdbcb3 TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="1" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.1 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.1 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.1/qa/workunits/cephadm/create_iscsi_disks.sh'

pass 5970018 2021-03-16 05:27:30 2021-03-16 10:20:55 2021-03-16 10:48:48 0:27:53 0:15:57 0:11:56 smithi master ubuntu 20.04 rados:cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/classic start} 2
pass 5970019 2021-03-16 05:27:31 2021-03-16 10:21:25 2021-03-16 10:50:21 0:28:56 0:16:39 0:12:17 smithi master ubuntu 18.04 rados:cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_18.04} 2
pass 5970020 2021-03-16 05:27:32 2021-03-16 10:22:56 2021-03-16 11:11:13 0:48:17 0:36:13 0:12:04 smithi master ubuntu 20.04 rados:cephadm/with-work/{0-distro/ubuntu_20.04_kubic_stable fixed-2 mode/packaged mon_election/connectivity msgr/async-v2only start tasks/rados_api_tests} 2
pass 5970021 2021-03-16 05:27:33 2021-03-16 10:22:56 2021-03-16 10:49:55 0:26:59 0:15:50 0:11:09 smithi master ubuntu 20.04 rados:cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/connectivity start} 2
pass 5970022 2021-03-16 05:27:34 2021-03-16 10:24:27 2021-03-16 10:39:57 0:15:30 0:05:40 0:09:50 smithi master ubuntu 20.04 rados:cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/classic task/test_cephadm_repos} 1
pass 5970023 2021-03-16 05:27:35 2021-03-16 10:24:37 2021-03-16 11:00:31 0:35:54 0:25:28 0:10:26 smithi master ubuntu 20.04 rados:cephadm/with-work/{0-distro/ubuntu_20.04_kubic_testing fixed-2 mode/root mon_election/classic msgr/async start tasks/rados_python} 2
pass 5970024 2021-03-16 05:27:36 2021-03-16 10:25:07 2021-03-16 11:15:25 0:50:18 0:38:58 0:11:20 smithi master ubuntu 20.04 rados:cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/snaps-few-objects fixed-2 msgr/async-v2only root} 2
pass 5970025 2021-03-16 05:27:37 2021-03-16 10:25:48 2021-03-16 11:09:25 0:43:37 0:34:21 0:09:16 smithi master centos 8.2 rados:cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/connectivity start} 2
pass 5970026 2021-03-16 05:27:38 2021-03-16 10:26:48 2021-03-16 10:54:50 0:28:02 0:17:13 0:10:49 smithi master ubuntu 20.04 rados:cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04} 2
pass 5970027 2021-03-16 05:27:39 2021-03-16 10:27:08 2021-03-16 11:03:42 0:36:34 0:24:15 0:12:19 smithi master ubuntu 20.04 rados:cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/classic} 2