| User | Scheduled | Started | Updated | Runtime | Suite | Branch | Machine Type | Revision | Pass | Fail | Dead |
|---|---|---|---|---|---|---|---|---|---|---|---|
| yuriw | 2021-03-17 23:47:24 | 2021-03-18 05:57:53 | 2021-03-18 19:39:11 | 13:41:18 | rados | wip-yuri6-testing-3.17.21 | smithi | 3ae49e8 | 320 | 20 | 9 |
| Status | Job ID | Links | Posted | Started | Updated | Runtime |
Duration |
In Waiting |
Machine | Teuthology Branch | OS Type | OS Version | Description | Nodes |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| pass | 5974879 |
|
2021-03-17 23:48:54 | 2021-03-18 05:57:53 | 2021-03-18 06:17:19 | 0:19:26 | 0:09:20 | 0:10:06 | smithi | master | ubuntu | 20.04 | rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/classic task/test_adoption} | 1 |
| pass | 5974881 |
|
2021-03-17 23:48:55 | 2021-03-18 05:57:54 | 2021-03-18 06:13:13 | 0:15:19 | 0:06:49 | 0:08:30 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/large-omap-object-warnings mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5974883 |
|
2021-03-17 23:48:56 | 2021-03-18 05:57:54 | 2021-03-18 06:39:58 | 0:42:04 | 0:34:41 | 0:07:23 | smithi | master | rhel | 8.3 | rados/singleton-bluestore/{all/cephtool mon_election/classic msgr-failures/many msgr/async-v2only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{rhel_8}} | 1 |
| fail | 5974885 |
|
2021-03-17 23:48:57 | 2021-03-18 05:57:55 | 2021-03-18 06:19:21 | 0:21:26 | 0:10:51 | 0:10:35 | smithi | master | ubuntu | 20.04 | rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_stable fixed-2 mode/packaged mon_election/classic msgr/async-v1only start tasks/rados_api_tests} | 2 |
Failure Reason:
Command failed on smithi166 with status 126: 'sudo cephadm --image quay.ceph.io/ceph-ci/ceph:3ae49e85764e073e154cc3617a04d1d62c9897ac shell -c /etc/ceph/ceph.conf -k /etc/ceph/ceph.client.admin.keyring --fsid 51904e72-87b1-11eb-9096-001a4aab830c -- ceph orch host ls --format=json' |
||||||||||||||
| pass | 5974887 |
|
2021-03-17 23:48:58 | 2021-03-18 05:57:56 | 2021-03-18 06:19:00 | 0:21:04 | 0:10:42 | 0:10:22 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/osd-delay objectstore/filestore-xfs rados recovery-overrides/{more-async-recovery} supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5974889 |
|
2021-03-17 23:48:59 | 2021-03-18 05:57:56 | 2021-03-18 06:17:30 | 0:19:34 | 0:09:21 | 0:10:13 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/mon-config-key-caps mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5974891 |
|
2021-03-17 23:49:00 | 2021-03-18 05:57:56 | 2021-03-18 06:31:32 | 0:33:36 | 0:24:38 | 0:08:58 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/cache-pool-snaps} | 2 |
| pass | 5974893 |
|
2021-03-17 23:49:01 | 2021-03-18 05:58:27 | 2021-03-18 06:17:42 | 0:19:15 | 0:10:16 | 0:08:59 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/classic objectstore/bluestore-comp openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_4M_seq_read} | 1 |
| pass | 5974895 |
|
2021-03-17 23:49:02 | 2021-03-18 05:58:27 | 2021-03-18 06:34:16 | 0:35:49 | 0:25:24 | 0:10:25 | smithi | master | rados/upgrade/pacific-x/rgw-multisite/{clusters frontend overrides realm tasks upgrade/secondary} | 2 | ||
| pass | 5974897 |
|
2021-03-17 23:49:03 | 2021-03-18 05:58:37 | 2021-03-18 06:34:43 | 0:36:06 | 0:26:00 | 0:10:06 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/osd-delay rados recovery-overrides/{more-async-recovery} supported-random-distro$/{centos_8} thrashers/morepggrow thrashosds-health workloads/ec-small-objects-overwrites} | 2 |
| fail | 5974899 |
|
2021-03-17 23:49:04 | 2021-03-18 05:58:48 | 2021-03-18 06:18:50 | 0:20:02 | 0:08:55 | 0:11:07 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/connectivity start} | 2 |
Failure Reason:
Command failed on smithi141 with status 1: 'sudo /home/ubuntu/cephtest/cephadm --image quay.ceph.io/ceph-ci/ceph:3ae49e85764e073e154cc3617a04d1d62c9897ac shell -c /etc/ceph/ceph.conf -k /etc/ceph/ceph.client.admin.keyring --fsid 392e59c8-87b1-11eb-9096-001a4aab830c -- ceph orch host ls --format=json' |
||||||||||||||
| pass | 5974901 |
|
2021-03-17 23:49:05 | 2021-03-18 05:59:29 | 2021-03-18 06:33:13 | 0:33:44 | 0:24:04 | 0:09:40 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/classic msgr-failures/few objectstore/bluestore-comp-zlib rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/minsize_recovery thrashosds-health workloads/ec-small-objects-many-deletes} | 2 |
| pass | 5974903 |
|
2021-03-17 23:49:06 | 2021-03-18 05:59:39 | 2021-03-18 06:22:00 | 0:22:21 | 0:10:37 | 0:11:44 | smithi | master | centos | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{centos_8} tasks/scrub_test} | 2 |
| fail | 5974905 |
|
2021-03-17 23:49:07 | 2021-03-18 06:00:49 | 2021-03-18 06:22:13 | 0:21:24 | 0:10:40 | 0:10:44 | smithi | master | ubuntu | 20.04 | rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/snaps-few-objects fixed-2 msgr/async root} | 2 |
Failure Reason:
Command failed on smithi188 with status 1: 'sudo /home/ubuntu/cephtest/cephadm --image quay.ceph.io/ceph-ci/ceph:3ae49e85764e073e154cc3617a04d1d62c9897ac shell -c /etc/ceph/ceph.conf -k /etc/ceph/ceph.client.admin.keyring --fsid ab121c28-87b1-11eb-9096-001a4aab830c -- ceph orch host ls --format=json' |
||||||||||||||
| pass | 5974907 |
|
2021-03-17 23:49:08 | 2021-03-18 06:00:50 | 2021-03-18 06:22:27 | 0:21:37 | 0:10:41 | 0:10:56 | smithi | master | ubuntu | 18.04 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-comp-snappy supported-random-distro$/{ubuntu_latest} tasks/failover} | 2 |
| pass | 5974909 |
|
2021-03-18 06:01:10 | 2021-03-18 06:01:10 | 2021-03-18 06:18:56 | 0:17:46 | 0:08:39 | 0:09:07 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/lazy_omap_stats_output mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5974911 |
|
2021-03-17 23:49:10 | 2021-03-18 06:01:41 | 2021-03-18 06:24:30 | 0:22:49 | 0:15:56 | 0:06:53 | smithi | master | rhel | 8.3 | rados/singleton/{all/mon-config-keys mon_election/classic msgr-failures/none msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5974913 |
|
2021-03-17 23:49:11 | 2021-03-18 06:01:41 | 2021-03-18 06:49:21 | 0:47:40 | 0:36:19 | 0:11:21 | smithi | master | centos | 8.2 | rados/cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/connectivity start} | 2 |
| pass | 5974914 |
|
2021-03-17 23:49:12 | 2021-03-18 06:02:01 | 2021-03-18 06:33:30 | 0:31:29 | 0:22:42 | 0:08:47 | smithi | master | centos | 8.3 | rados/objectstore/{backends/objectcacher-stress supported-random-distro$/{centos_8}} | 1 |
| pass | 5974917 |
|
2021-03-17 23:49:13 | 2021-03-18 06:02:32 | 2021-03-18 06:41:25 | 0:38:53 | 0:32:35 | 0:06:18 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/cache-snaps-balanced} | 2 |
| pass | 5974919 |
|
2021-03-17 23:49:14 | 2021-03-18 06:02:32 | 2021-03-18 06:30:38 | 0:28:06 | 0:17:11 | 0:10:55 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04} | 2 |
| pass | 5974921 |
|
2021-03-17 23:49:15 | 2021-03-18 06:02:42 | 2021-03-18 06:53:14 | 0:50:32 | 0:44:55 | 0:05:37 | smithi | master | rhel | 8.3 | rados/standalone/{mon_election/connectivity supported-random-distro$/{rhel_8} workloads/mon} | 1 |
| pass | 5974923 |
|
2021-03-17 23:49:16 | 2021-03-18 06:02:42 | 2021-03-18 06:20:05 | 0:17:23 | 0:06:59 | 0:10:24 | smithi | master | centos | 8.3 | rados/multimon/{clusters/6 mon_election/connectivity msgr-failures/many msgr/async-v1only no_pools objectstore/bluestore-stupid rados supported-random-distro$/{centos_8} tasks/mon_clock_with_skews} | 2 |
| pass | 5974925 |
|
2021-03-17 23:49:17 | 2021-03-18 06:03:13 | 2021-03-18 06:20:40 | 0:17:27 | 0:07:32 | 0:09:55 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/librados_hello_world mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5974927 |
|
2021-03-17 23:49:18 | 2021-03-18 06:03:23 | 2021-03-18 06:39:30 | 0:36:07 | 0:24:04 | 0:12:03 | smithi | master | ubuntu | 20.04 | rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04-15.2.9 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/classic} | 2 |
| pass | 5974929 |
|
2021-03-17 23:49:19 | 2021-03-18 06:04:03 | 2021-03-18 06:21:06 | 0:17:03 | 0:08:33 | 0:08:30 | smithi | master | centos | 8.3 | rados/singleton/{all/mon-config mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5974931 |
|
2021-03-17 23:49:20 | 2021-03-18 06:04:04 | 2021-03-18 06:33:51 | 0:29:47 | 0:20:45 | 0:09:02 | smithi | master | centos | 8.2 | rados/cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/connectivity task/test_cephadm} | 1 |
| pass | 5974933 |
|
2021-03-17 23:49:21 | 2021-03-18 06:04:04 | 2021-03-18 06:22:56 | 0:18:52 | 0:08:20 | 0:10:32 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/connectivity objectstore/bluestore-low-osd-mem-target openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/radosbench_4M_write} | 1 |
| pass | 5974935 |
|
2021-03-17 23:49:22 | 2021-03-18 06:05:24 | 2021-03-18 06:42:19 | 0:36:55 | 0:26:21 | 0:10:34 | smithi | master | ubuntu | 18.04 | rados/monthrash/{ceph clusters/9-mons mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{ubuntu_latest} thrashers/sync-many workloads/rados_api_tests} | 2 |
| pass | 5974937 |
|
2021-03-17 23:49:23 | 2021-03-18 06:06:25 | 2021-03-18 06:58:42 | 0:52:17 | 0:41:27 | 0:10:50 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/nautilus backoff/peering_and_degraded ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/osd-delay rados thrashers/mapgap thrashosds-health workloads/snaps-few-objects} | 3 |
| pass | 5974939 |
|
2021-03-17 23:49:24 | 2021-03-18 06:07:05 | 2021-03-18 06:45:21 | 0:38:16 | 0:31:25 | 0:06:51 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/morepggrow thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} | 3 |
| pass | 5974941 |
|
2021-03-17 23:49:25 | 2021-03-18 06:08:16 | 2021-03-18 06:39:51 | 0:31:35 | 0:21:14 | 0:10:21 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/none thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5974943 |
|
2021-03-17 23:49:26 | 2021-03-18 06:08:26 | 2021-03-18 06:32:03 | 0:23:37 | 0:14:29 | 0:09:08 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/classic msgr-failures/few msgr/async-v2only objectstore/bluestore-low-osd-mem-target rados tasks/rados_cls_all validater/lockdep} | 2 |
| pass | 5974945 |
|
2021-03-17 23:49:27 | 2021-03-18 06:09:07 | 2021-03-18 06:42:19 | 0:33:12 | 0:23:09 | 0:10:03 | smithi | master | ubuntu | 20.04 | rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_testing fixed-2 mode/root mon_election/connectivity msgr/async-v2only start tasks/rados_python} | 2 |
| pass | 5974947 |
|
2021-03-17 23:49:28 | 2021-03-18 06:09:07 | 2021-03-18 06:45:05 | 0:35:58 | 0:28:09 | 0:07:49 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8} thrashers/mapgap thrashosds-health workloads/cache-snaps} | 2 |
| pass | 5974949 |
|
2021-03-17 23:49:29 | 2021-03-18 06:09:47 | 2021-03-18 06:35:31 | 0:25:44 | 0:15:02 | 0:10:42 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/msgr mon_election/classic rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5974951 |
|
2021-03-17 23:49:30 | 2021-03-18 06:10:08 | 2021-03-18 06:56:39 | 0:46:31 | 0:39:09 | 0:07:22 | smithi | master | centos | 8.3 | rados/singleton/{all/osd-backfill mon_election/classic msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5974953 |
|
2021-03-17 23:49:31 | 2021-03-18 06:10:08 | 2021-03-18 06:57:48 | 0:47:40 | 0:40:34 | 0:07:06 | smithi | master | rhel | 8.3 | rados/cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/classic start} | 2 |
| pass | 5974955 |
|
2021-03-17 23:49:32 | 2021-03-18 06:10:38 | 2021-03-18 06:39:03 | 0:28:25 | 0:10:58 | 0:17:27 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-bitmap rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5974957 |
|
2021-03-17 23:49:33 | 2021-03-18 06:15:29 | 2021-03-18 06:50:18 | 0:34:49 | 0:23:55 | 0:10:54 | smithi | master | ubuntu | 18.04 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{ubuntu_latest} tasks/rados_api_tests} | 2 |
| pass | 5974959 |
|
2021-03-17 23:49:34 | 2021-03-18 06:16:30 | 2021-03-18 07:04:08 | 0:47:38 | 0:36:32 | 0:11:06 | smithi | master | ubuntu | 20.04 | rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/rados_api_tests fixed-2 msgr/async-v1only root} | 2 |
| pass | 5974961 |
|
2021-03-17 23:49:35 | 2021-03-18 06:16:40 | 2021-03-18 06:48:30 | 0:31:50 | 0:24:58 | 0:06:52 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-comp-zstd rados recovery-overrides/{more-active-recovery} supported-random-distro$/{rhel_8} thrashers/morepggrow thrashosds-health workloads/ec-small-objects} | 2 |
| fail | 5974963 |
|
2021-03-17 23:49:36 | 2021-03-18 06:17:31 | 2021-03-18 06:38:58 | 0:21:27 | 0:10:35 | 0:10:52 | smithi | master | ubuntu | 20.04 | rados/cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_testing task/test_e2e} | 2 |
Failure Reason:
Command failed on smithi109 with status 1: 'sudo /home/ubuntu/cephtest/cephadm --image quay.ceph.io/ceph-ci/ceph:3ae49e85764e073e154cc3617a04d1d62c9897ac shell -c /etc/ceph/ceph.conf -k /etc/ceph/ceph.client.admin.keyring --fsid 17ceee2a-87b4-11eb-9096-001a4aab830c -- ceph orch host ls --format=json' |
||||||||||||||
| pass | 5974965 |
|
2021-03-17 23:49:37 | 2021-03-18 06:17:31 | 2021-03-18 06:49:10 | 0:31:39 | 0:21:45 | 0:09:54 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/multi-backfill-reject mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} | 2 |
| pass | 5974967 |
|
2021-03-17 23:49:38 | 2021-03-18 06:17:51 | 2021-03-18 07:27:40 | 1:09:49 | 0:59:36 | 0:10:13 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/osd-recovery-incomplete mon_election/connectivity msgr-failures/none msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5974969 |
|
2021-03-17 23:49:39 | 2021-03-18 06:18:11 | 2021-03-18 06:39:36 | 0:21:25 | 0:14:05 | 0:07:20 | smithi | master | rhel | 8.3 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-comp-zlib supported-random-distro$/{rhel_8} tasks/insights} | 2 |
| pass | 5974971 |
|
2021-03-17 23:49:40 | 2021-03-18 06:18:52 | 2021-03-18 09:42:10 | 3:23:18 | 3:13:48 | 0:09:30 | smithi | master | centos | 8.3 | rados/standalone/{mon_election/classic supported-random-distro$/{centos_8} workloads/osd} | 1 |
| pass | 5974973 |
|
2021-03-17 23:49:41 | 2021-03-18 06:19:02 | 2021-03-18 06:42:01 | 0:22:59 | 0:17:26 | 0:05:33 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-zstd rados supported-random-distro$/{rhel_8} thrashers/morepggrow thrashosds-health workloads/cache} | 2 |
| pass | 5974975 |
|
2021-03-17 23:49:42 | 2021-03-18 06:19:02 | 2021-03-18 06:44:45 | 0:25:43 | 0:14:45 | 0:10:58 | smithi | master | ubuntu | 18.04 | rados/cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/connectivity start} | 2 |
| pass | 5974977 |
|
2021-03-17 23:49:43 | 2021-03-18 06:19:03 | 2021-03-18 06:54:40 | 0:35:37 | 0:26:02 | 0:09:35 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/classic objectstore/bluestore-stupid openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_omap_write} | 1 |
| pass | 5974979 |
|
2021-03-17 23:49:44 | 2021-03-18 06:19:23 | 2021-03-18 06:51:46 | 0:32:23 | 0:19:55 | 0:12:28 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_stable} | 2 |
| dead | 5974981 |
|
2021-03-17 23:49:45 | 2021-03-18 06:20:03 | 2021-03-18 06:44:39 | 0:24:36 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/osd_stale_reads mon_election/classic rados supported-random-distro$/{ubuntu_latest}} | 1 | ||
| pass | 5974983 |
|
2021-03-17 23:49:46 | 2021-03-18 06:20:04 | 2021-03-18 06:40:58 | 0:20:54 | 0:14:36 | 0:06:18 | smithi | master | rhel | 8.3 | rados/singleton/{all/osd-recovery mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5974985 |
|
2021-03-17 23:49:47 | 2021-03-18 06:20:14 | 2021-03-18 07:25:43 | 1:05:29 | 0:55:41 | 0:09:48 | smithi | master | centos | 8.2 | rados/cephadm/with-work/{0-distro/centos_8.2_kubic_stable fixed-2 mode/packaged mon_election/classic msgr/async-v2only start tasks/rados_api_tests} | 2 |
| pass | 5974987 |
|
2021-03-17 23:49:48 | 2021-03-18 06:20:44 | 2021-03-18 12:09:00 | 5:48:16 | 5:07:06 | 0:41:10 | smithi | master | ubuntu | 18.04 | rados/objectstore/{backends/objectstore supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5974989 |
|
2021-03-17 23:49:49 | 2021-03-18 06:20:54 | 2021-03-18 06:44:26 | 0:23:32 | 0:16:55 | 0:06:37 | smithi | master | rhel | 8.3 | rados/multimon/{clusters/9 mon_election/classic msgr-failures/few msgr/async-v2only no_pools objectstore/filestore-xfs rados supported-random-distro$/{rhel_8} tasks/mon_recovery} | 3 |
| pass | 5974991 |
|
2021-03-17 23:49:50 | 2021-03-18 06:20:55 | 2021-03-18 06:58:11 | 0:37:16 | 0:30:34 | 0:06:42 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/fast mon_election/connectivity msgr-failures/fastclose rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/ec-snaps-few-objects-overwrites} | 2 |
| pass | 5974993 |
|
2021-03-17 23:49:51 | 2021-03-18 06:21:05 | 2021-03-18 06:53:16 | 0:32:11 | 0:22:03 | 0:10:08 | smithi | master | centos | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-active-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-hybrid rados supported-random-distro$/{centos_8} thrashers/none thrashosds-health workloads/pool-snaps-few-objects} | 2 |
| pass | 5974995 |
|
2021-03-17 23:49:52 | 2021-03-18 06:21:06 | 2021-03-18 06:36:26 | 0:15:20 | 0:05:17 | 0:10:03 | smithi | master | ubuntu | 20.04 | rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/classic task/test_cephadm_repos} | 1 |
| pass | 5974997 |
|
2021-03-17 23:49:53 | 2021-03-18 06:21:06 | 2021-03-18 06:48:48 | 0:27:42 | 0:15:58 | 0:11:44 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/classic start} | 2 |
| pass | 5974999 |
|
2021-03-17 23:49:54 | 2021-03-18 06:21:36 | 2021-03-18 06:36:52 | 0:15:16 | 0:06:55 | 0:08:21 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/peer mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975001 |
|
2021-03-17 23:49:55 | 2021-03-18 06:21:36 | 2021-03-18 06:38:38 | 0:17:02 | 0:11:10 | 0:05:52 | smithi | master | rhel | 8.3 | rados/singleton-nomsgr/{all/pool-access mon_election/connectivity rados supported-random-distro$/{rhel_8}} | 1 |
| dead | 5975003 |
|
2021-03-17 23:49:55 | 2021-03-18 06:22:07 | 2021-03-18 07:09:05 | 0:46:58 | smithi | master | centos | 8.3 | rados/monthrash/{ceph clusters/3-mons mon_election/classic msgr-failures/mon-delay msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{centos_8} thrashers/sync workloads/rados_mon_osdmap_prune} | 2 | ||
| pass | 5975005 |
|
2021-03-17 23:49:56 | 2021-03-18 06:22:17 | 2021-03-18 07:04:53 | 0:42:36 | 0:24:19 | 0:18:17 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/octopus backoff/normal ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/fastclose rados thrashers/morepggrow thrashosds-health workloads/test_rbd_api} | 3 |
| pass | 5975007 |
|
2021-03-17 23:49:57 | 2021-03-18 06:22:27 | 2021-03-18 06:45:10 | 0:22:43 | 0:10:46 | 0:11:57 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-stupid rados recovery-overrides/{more-active-recovery} supported-random-distro$/{centos_8} thrashers/pggrow thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} | 3 |
| pass | 5975009 |
|
2021-03-17 23:49:58 | 2021-03-18 06:23:18 | 2021-03-18 06:58:42 | 0:35:24 | 0:26:26 | 0:08:58 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-stupid rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5975011 |
|
2021-03-17 23:49:59 | 2021-03-18 06:23:18 | 2021-03-18 07:03:28 | 0:40:10 | 0:28:28 | 0:11:42 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-stupid rados tasks/mon_recovery validater/valgrind} | 2 |
| pass | 5975013 |
|
2021-03-17 23:50:00 | 2021-03-18 06:24:18 | 2021-03-18 06:52:00 | 0:27:42 | 0:18:09 | 0:09:33 | smithi | master | rhel | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8} tasks/rados_cls_all} | 2 |
| pass | 5975015 |
|
2021-03-17 23:50:01 | 2021-03-18 06:26:19 | 2021-03-18 07:03:45 | 0:37:26 | 0:24:17 | 0:13:09 | smithi | master | ubuntu | 20.04 | rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/connectivity} | 2 |
| pass | 5975017 |
|
2021-03-17 23:50:02 | 2021-03-18 06:28:20 | 2021-03-18 06:50:55 | 0:22:35 | 0:09:58 | 0:12:37 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/fastclose objectstore/bluestore-comp-lz4 rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975019 |
|
2021-03-17 23:50:03 | 2021-03-18 06:29:30 | 2021-03-18 08:29:35 | 2:00:05 | 1:50:20 | 0:09:45 | smithi | master | centos | 8.3 | rados/standalone/{mon_election/connectivity supported-random-distro$/{centos_8} workloads/scrub} | 1 |
| pass | 5975021 |
|
2021-03-17 23:50:04 | 2021-03-18 06:30:31 | 2021-03-18 07:28:11 | 0:57:40 | 0:50:17 | 0:07:23 | smithi | master | rhel | 8.3 | rados/cephadm/with-work/{0-distro/rhel_8.3_kubic_stable fixed-2 mode/root mon_election/connectivity msgr/async start tasks/rados_python} | 2 |
| dead | 5975023 |
|
2021-03-17 23:50:05 | 2021-03-18 06:30:41 | 2021-03-18 07:12:29 | 0:41:48 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/rados_api_tests} | 2 | ||
| pass | 5975025 |
|
2021-03-17 23:50:06 | 2021-03-18 06:31:12 | 2021-03-18 06:52:24 | 0:21:12 | 0:12:09 | 0:09:03 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/connectivity objectstore/bluestore-basic-min-osd-mem-target openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/sample_fio} | 1 |
| pass | 5975027 |
|
2021-03-17 23:50:07 | 2021-03-18 06:31:42 | 2021-03-18 06:51:06 | 0:19:24 | 0:12:11 | 0:07:13 | smithi | master | rhel | 8.3 | rados/singleton/{all/pg-autoscaler-progress-off mon_election/classic msgr-failures/none msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{rhel_8}} | 2 |
| fail | 5975029 |
|
2021-03-17 23:50:08 | 2021-03-18 06:32:12 | 2021-03-18 06:38:54 | 0:06:42 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/recovery-unfound-found mon_election/classic rados supported-random-distro$/{ubuntu_latest}} | 1 | ||
Failure Reason:
could not read lock status for smithi005.front.sepia.ceph.com |
||||||||||||||
| pass | 5975031 |
|
2021-03-17 23:50:09 | 2021-03-18 06:32:13 | 2021-03-18 07:00:03 | 0:27:50 | 0:15:57 | 0:11:53 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975033 |
|
2021-03-17 23:50:10 | 2021-03-18 06:32:43 | 2021-03-18 07:10:12 | 0:37:29 | 0:28:14 | 0:09:15 | smithi | master | centos | 8.3 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/classic msgr-failures/fastclose objectstore/bluestore-hybrid rados recovery-overrides/{default} supported-random-distro$/{centos_8} thrashers/pggrow thrashosds-health workloads/ec-rados-plugin=clay-k=4-m=2} | 2 |
| pass | 5975035 |
|
2021-03-17 23:50:11 | 2021-03-18 06:32:53 | 2021-03-18 07:06:29 | 0:33:36 | 0:23:51 | 0:09:45 | smithi | master | centos | 8.3 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-comp-zstd supported-random-distro$/{centos_8} tasks/module_selftest} | 2 |
| pass | 5975037 |
|
2021-03-17 23:50:12 | 2021-03-18 06:33:24 | 2021-03-18 07:05:02 | 0:31:38 | 0:19:58 | 0:11:40 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_testing} | 2 |
| fail | 5975038 |
|
2021-03-17 23:50:13 | 2021-03-18 06:33:24 | 2021-03-18 07:02:58 | 0:29:34 | 0:19:59 | 0:09:35 | smithi | master | ubuntu | 20.04 | rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/connectivity task/test_orch_cli} | 1 |
Failure Reason:
Test failure: test_cephfs_mirror (tasks.cephadm_cases.test_cli.TestCephadmCLI) |
||||||||||||||
| pass | 5975040 |
|
2021-03-17 23:50:14 | 2021-03-18 06:33:24 | 2021-03-18 06:52:44 | 0:19:20 | 0:12:04 | 0:07:16 | smithi | master | rhel | 8.3 | rados/singleton/{all/pg-autoscaler mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8}} | 2 |
| pass | 5975042 |
|
2021-03-17 23:50:15 | 2021-03-18 06:33:35 | 2021-03-18 07:45:51 | 1:12:16 | 1:01:22 | 0:10:54 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-stupid rados supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/radosbench-high-concurrency} | 2 |
| pass | 5975044 |
|
2021-03-17 23:50:16 | 2021-03-18 06:33:55 | 2021-03-18 06:51:08 | 0:17:13 | 0:08:03 | 0:09:10 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/version-number-sanity mon_election/connectivity rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975046 |
|
2021-03-17 23:50:17 | 2021-03-18 06:34:05 | 2021-03-18 07:59:33 | 1:25:28 | 1:15:11 | 0:10:17 | smithi | master | ubuntu | 20.04 | rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_testing 1-start 2-thrash 3-tasks/radosbench fixed-2 msgr/async-v2only root} | 2 |
| pass | 5975048 |
|
2021-03-17 23:50:18 | 2021-03-18 06:34:06 | 2021-03-18 07:13:30 | 0:39:24 | 0:29:11 | 0:10:13 | smithi | master | centos | 8.3 | rados/singleton-bluestore/{all/cephtool mon_election/connectivity msgr-failures/none msgr/async objectstore/bluestore-comp-snappy rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975050 |
|
2021-03-17 23:50:19 | 2021-03-18 06:34:26 | 2021-03-18 07:02:14 | 0:27:48 | 0:16:10 | 0:11:38 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/classic start} | 2 |
| pass | 5975052 |
|
2021-03-17 23:50:20 | 2021-03-18 06:34:36 | 2021-03-18 07:07:48 | 0:33:12 | 0:22:11 | 0:11:01 | smithi | master | centos | 8.3 | rados/multimon/{clusters/21 mon_election/connectivity msgr-failures/many msgr/async no_pools objectstore/bluestore-bitmap rados supported-random-distro$/{centos_8} tasks/mon_recovery} | 3 |
| pass | 5975054 |
|
2021-03-17 23:50:21 | 2021-03-18 06:34:46 | 2021-03-18 06:51:00 | 0:16:14 | 0:06:34 | 0:09:40 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/pg-removal-interruption mon_election/classic msgr-failures/many msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975056 |
|
2021-03-17 23:50:22 | 2021-03-18 06:35:37 | 2021-03-18 06:55:38 | 0:20:01 | 0:09:33 | 0:10:28 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/classic objectstore/bluestore-bitmap openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/sample_radosbench} | 1 |
| pass | 5975058 |
|
2021-03-17 23:50:23 | 2021-03-18 06:36:27 | 2021-03-18 07:22:21 | 0:45:54 | 0:33:49 | 0:12:05 | smithi | master | ubuntu | 18.04 | rados/cephadm/with-work/{0-distro/ubuntu_18.04 fixed-2 mode/packaged mon_election/classic msgr/async-v1only start tasks/rados_api_tests} | 2 |
| pass | 5975060 |
|
2021-03-17 23:50:24 | 2021-03-18 06:38:58 | 2021-03-18 07:44:09 | 1:05:11 | 0:59:43 | 0:05:28 | smithi | master | rhel | 8.3 | rados/dashboard/{clusters/{2-node-mgr} debug/mgr mon_election/classic random-objectstore$/{bluestore-stupid} supported-random-distro$/{rhel_8} tasks/dashboard} | 2 |
| pass | 5975062 |
|
2021-03-17 23:50:25 | 2021-03-18 06:39:08 | 2021-03-18 06:56:24 | 0:17:16 | 0:11:15 | 0:06:01 | smithi | master | rhel | 8.3 | rados/objectstore/{backends/alloc-hint supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975064 |
|
2021-03-17 23:50:26 | 2021-03-18 06:39:08 | 2021-03-18 06:58:02 | 0:18:54 | 0:12:08 | 0:06:46 | smithi | master | rhel | 8.3 | rados/rest/{mgr-restful supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975066 |
|
2021-03-17 23:50:27 | 2021-03-18 06:39:08 | 2021-03-18 07:01:47 | 0:22:39 | 0:17:08 | 0:05:31 | smithi | master | rhel | 8.3 | rados/singleton-nomsgr/{all/admin_socket_output mon_election/classic rados supported-random-distro$/{rhel_8}} | 1 |
| dead | 5975068 |
|
2021-03-17 23:50:28 | 2021-03-18 06:39:09 | 2021-03-18 06:57:53 | 0:18:44 | smithi | master | centos | 8.3 | rados/standalone/{mon_election/classic supported-random-distro$/{centos_8} workloads/crush} | 1 | ||
| fail | 5975070 |
|
2021-03-17 23:50:29 | 2021-03-18 06:39:39 | 2021-03-18 08:15:16 | 1:35:37 | 1:24:36 | 0:11:01 | smithi | master | ubuntu | 20.04 | rados/upgrade/pacific-x/parallel/{0-start 1-tasks distro1$/{ubuntu_20.04} mon_election/classic upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}} | 2 |
Failure Reason:
Command failed (workunit test rbd/test_librbd_python.sh) on smithi104 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && cd -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=pacific TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="0" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.0 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.0 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.0/qa/workunits/rbd/test_librbd_python.sh' |
||||||||||||||
| pass | 5975072 |
|
2021-03-17 23:50:29 | 2021-03-18 06:39:39 | 2021-03-18 07:06:42 | 0:27:03 | 0:18:06 | 0:08:57 | smithi | master | centos | 8.3 | rados/valgrind-leaks/{1-start 2-inject-leak/mon centos_latest} | 1 |
| pass | 5975074 |
|
2021-03-17 23:50:31 | 2021-03-18 06:39:40 | 2021-03-18 07:02:59 | 0:23:19 | 0:14:06 | 0:09:13 | smithi | master | centos | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{centos_8} tasks/rados_python} | 2 |
| pass | 5975076 |
|
2021-03-17 23:50:32 | 2021-03-18 06:39:40 | 2021-03-18 08:01:08 | 1:21:28 | 1:12:02 | 0:09:26 | smithi | master | centos | 8.3 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-active-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/filestore-xfs rados supported-random-distro$/{centos_8} thrashers/default thrashosds-health workloads/radosbench} | 2 |
| fail | 5975078 |
|
2021-03-17 23:50:33 | 2021-03-18 06:40:00 | 2021-03-18 07:16:09 | 0:36:09 | 0:24:18 | 0:11:51 | smithi | master | centos | 8.2 | rados/cephadm/dashboard/{0-distro/centos_8.2_kubic_stable task/test_e2e} | 2 |
Failure Reason:
Command failed (workunit test cephadm/test_dashboard_e2e.sh) on smithi081 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && cd -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=3ae49e85764e073e154cc3617a04d1d62c9897ac TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="0" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.0 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.0 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.0/qa/workunits/cephadm/test_dashboard_e2e.sh' |
||||||||||||||
| pass | 5975080 |
|
2021-03-17 23:50:33 | 2021-03-18 06:41:01 | 2021-03-18 07:16:42 | 0:35:41 | 0:26:06 | 0:09:35 | smithi | master | centos | 8.3 | rados/monthrash/{ceph clusters/9-mons mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{centos_8} thrashers/force-sync-many workloads/rados_mon_workunits} | 2 |
| pass | 5975082 |
|
2021-03-17 23:50:34 | 2021-03-18 06:41:31 | 2021-03-18 07:21:42 | 0:40:11 | 0:28:45 | 0:11:26 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/pacific backoff/peering ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/few rados thrashers/none thrashosds-health workloads/cache-snaps} | 3 |
| pass | 5975084 |
|
2021-03-17 23:50:35 | 2021-03-18 06:42:21 | 2021-03-18 07:15:21 | 0:33:00 | 0:27:12 | 0:05:48 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/fastclose objectstore/filestore-xfs rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} | 3 |
| pass | 5975086 |
|
2021-03-17 23:50:36 | 2021-03-18 06:42:22 | 2021-03-18 07:18:05 | 0:35:43 | 0:23:53 | 0:11:50 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/fastclose objectstore/filestore-xfs rados recovery-overrides/{more-active-recovery} supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5975088 |
|
2021-03-17 23:50:37 | 2021-03-18 06:44:32 | 2021-03-18 07:15:48 | 0:31:16 | 0:22:06 | 0:09:10 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/classic msgr-failures/few msgr/async-v1only objectstore/filestore-xfs rados tasks/rados_api_tests validater/lockdep} | 2 |
| pass | 5975090 |
|
2021-03-17 23:50:38 | 2021-03-18 06:44:43 | 2021-03-18 07:07:26 | 0:22:43 | 0:10:19 | 0:12:24 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-comp-snappy rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975092 |
|
2021-03-17 23:50:39 | 2021-03-18 06:45:13 | 2021-03-18 07:08:53 | 0:23:40 | 0:12:15 | 0:11:25 | smithi | master | ubuntu | 20.04 | rados/cephadm/orchestrator_cli/{2-node-mgr orchestrator_cli random-distro$/{ubuntu_20.04_kubic_stable}} | 2 |
| pass | 5975094 |
|
2021-03-17 23:50:40 | 2021-03-18 06:45:14 | 2021-03-18 07:05:43 | 0:20:29 | 0:11:55 | 0:08:34 | smithi | master | centos | 8.3 | rados/singleton/{all/radostool mon_election/connectivity msgr-failures/none msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975096 |
|
2021-03-17 23:50:41 | 2021-03-18 06:45:14 | 2021-03-18 07:03:05 | 0:17:51 | 0:07:18 | 0:10:33 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/balancer mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975098 |
|
2021-03-17 23:50:42 | 2021-03-18 06:45:24 | 2021-03-18 07:30:23 | 0:44:59 | 0:36:50 | 0:08:09 | smithi | master | centos | 8.2 | rados/cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/classic start} | 2 |
| pass | 5975100 |
|
2021-03-17 23:50:43 | 2021-03-18 06:45:24 | 2021-03-18 07:23:41 | 0:38:17 | 0:26:05 | 0:12:12 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/few rados recovery-overrides/{more-active-recovery} supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/ec-snaps-few-objects-overwrites} | 2 |
| fail | 5975102 |
|
2021-03-17 23:50:44 | 2021-03-18 06:48:36 | 2021-03-18 08:23:50 | 1:35:14 | 1:24:29 | 0:10:45 | smithi | master | centos | 8.2 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/centos_8.2_kubic_stable} | 2 |
Failure Reason:
SELinux denials found on ubuntu@smithi038.front.sepia.ceph.com: ['type=AVC msg=audit(1616051799.438:8176): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8200): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7649): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.466:8503): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7042): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051797.996:8145): avc: denied { write } for pid=25150 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6633): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6723): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.438:7721): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.438:6965): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051650.464:7392): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6552): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.063:8886): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8217): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy0/cpuinfo_max_freq" dev="sysfs" ino=29967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8688): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6731): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.727:6772): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8538): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.062:7779): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.059:7148): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051723.059:7768): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8557): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.229:8188): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6777): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7987): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.129:7407): avc: denied { read } for pid=74744 comm="msgr-worker-1" path="pipe:[269468]" dev="pipefs" ino=269468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7444): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8695): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.060:7868): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7803): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.465:6682): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051496.439:6676): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6718): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6740): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.439:7297): avc: denied { fork } for pid=40781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8801): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051726.309:7783): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.955:8677): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8478): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.754:6576): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.129:7408): avc: denied { write } for pid=74744 comm="msgr-worker-1" laddr=172.21.15.38 lport=48358 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8206): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.445:7274): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.178:8412): avc: denied { read } for pid=41370 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8398): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051860.464:8466): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[355417]" dev="sockfs" ino=355417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8207): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8536): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.438:6558): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.438:8418): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051492.742:6604): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051660.465:7453): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=53874 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7817): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8396): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8805): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8740): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8524): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.504:7082): avc: denied { read } for pid=50713 comm="msgr-worker-0" path="pipe:[200467]" dev="pipefs" ino=200467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8171): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7417): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8868): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8685): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8816): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051500.465:6684): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7471): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8078): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8499): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8898): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.706:8777): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.075:7019): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7699): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.438:6965): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8865): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.997:8044): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051927.881:8779): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8914): avc: denied { shutdown } for pid=25523 comm="msgr-worker-0" laddr=172.21.15.38 lport=57228 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.109:8007): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.217:8150): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.951:8675): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6619): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8119): avc: denied { getattr } for pid=95286 comm="pgrep" path="/proc/25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { open } for pid=56187 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051592.777:7134): avc: denied { unlink } for pid=25150 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8039): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.830:8065): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8219): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8174): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7848): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8916): avc: denied { setopt } for pid=25523 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.716:8840): avc: denied { write } for pid=44966 comm="msgr-worker-0" laddr=172.21.15.38 lport=6814 faddr=172.21.15.175 fport=54768 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6944): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051940.438:8829): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.470:7714): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.466:8017): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.652:8140): avc: denied { write } for pid=56187 comm="msgr-worker-1" laddr=172.21.15.38 lport=6826 faddr=172.21.15.175 fport=54834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7643): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.827:7823): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.060:7073): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.807:7502): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.438:7350): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574968 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7450): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7380): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.466:7456): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.438:6968): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7416): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7643): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.439:7723): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.282:8489): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051531.226:6818): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7831): avc: denied { search } for pid=92220 comm="pgrep" name="25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.062:8882): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051520.465:6787): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=46876 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8759): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7459): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.931:8068): avc: denied { append } for pid=25523 comm="log" path="/var/log/ceph/ceph-mgr.smithi038.bbeteq.log" dev="sda1" ino=396149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8535): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7364): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.215:8857): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.068:6636): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.729:7645): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7086): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051931.012:8791): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051531.771:6819): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051509.863:6701): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8552): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.188:7799): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6770): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.062:6633): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.019:8347): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051641.023:7362): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.464:7351): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8393): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.465:7123): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[306533]" dev="sockfs" ino=306533 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7064): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.975:8772): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.727:6772): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.584:7089): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.765:7720): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.059:7382): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.439:7807): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.039:6938): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7738): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.437:7349): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.060:6629): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.060:6805): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7291): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051530.834:6814): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.438:7296): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7849): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8226): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.716:7992): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.061:8094): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6944): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.059:7461): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6968): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.061:7476): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7388): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.718:8156): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7735): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.437:7107): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7295): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051520.465:6783): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7146): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7135): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7443): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7995): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { write } for pid=40781 comm="grafana-server" name="grafana" dev="sda1" ino=1970622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7738): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7740): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.465:8495): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { read } for pid=56187 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7649): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8207): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051800.000:8178): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.465:8012): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.438:7109): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8817): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.439:7419): avc: denied { read } for pid=40781 comm="grafana-server" name="radosgw-sync-overview.json" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.438:8900): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.511:7361): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8479): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7467): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7415): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.465:7122): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=35927 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8400): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8071): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.775:6792): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8692): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7507): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7038): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8817): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.439:6971): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.030:7102): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8193): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=47475 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.367:7020): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7368): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8872): avc: denied { read } for pid=34150 comm="node_exporter" name="ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.439:6698): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7424): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7030): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8672): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8224): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.062:8229): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7868): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7369): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7855): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.479:7628): avc: denied { append } for pid=25150 comm="log" path="/var/log/ceph/ceph-mon.smithi038.log" dev="sda1" ino=396143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8684): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.466:8789): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[365663]" dev="sockfs" ino=365663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7733): avc: denied { read } for pid=34150 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8548): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8393): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8396): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.059:8537): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8923): avc: denied { getattr } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58508 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7127): avc: denied { create } for pid=25150 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8402): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7375): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50015 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.366:8339): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.804:7336): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051566.959:6936): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8175): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051671.176:7498): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6626): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051955.566:8910): avc: denied { open } for pid=42730 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8509): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { add_name } for pid=40781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.438:7678): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.588:7500): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7775): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7047): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.437:7349): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6744): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.061:8227): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051663.060:7473): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6708): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.438:7677): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7051): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.998:8167): avc: denied { read } for pid=25150 comm="fn_monstore" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000023.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.207:7269): avc: denied { write } for pid=50713 comm="msgr-worker-0" laddr=172.21.15.38 lport=6822 faddr=172.21.15.175 fport=34958 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7374): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8089): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8690): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8066): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051796.437:8143): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { read } for pid=50713 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.027:8764): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.437:8899): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051595.565:7157): avc: denied { read } for pid=42730 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.188:7798): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6733): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.321:8769): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.777:7134): avc: denied { remove_name } for pid=25150 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.439:6970): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.059:6802): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.749:6573): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6570): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.060:7150): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.439:8041): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.776:7093): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051494.380:6671): avc: denied { write } for pid=44966 comm="msgr-worker-1" laddr=172.21.15.38 lport=6816 faddr=172.21.15.175 fport=59328 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.061:6630): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8464): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7850): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.660:7430): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7805): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8121): avc: denied { getattr } for pid=95286 comm="pgrep" path="/proc/25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7367): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.394:7340): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7152): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8413): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7390): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7701): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8384): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8557): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8892): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051858.578:8458): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8070): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.439:8521): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051930.465:8784): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7775): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8738): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.590:8063): avc: denied { read } for pid=50713 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6743): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051707.815:7649): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051869.889:8485): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8335): avc: denied { write } for pid=74283 comm="msgr-worker-1" laddr=172.21.15.38 lport=54444 faddr=172.21.15.38 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7680): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.006:8448): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.438:7415): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.272:7320): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7847): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { getattr } for pid=25523 comm="mgr-fin" name="UTC" dev="sda1" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8176): avc: denied { read } for pid=40781 comm="grafana-server" name="host-details.json" dev="sda1" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051512.964:6715): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.438:7721): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.866:8364): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6621): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8215): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy0/cpuinfo_max_freq" dev="sysfs" ino=29967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8799): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8881): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7752): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7039): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8390): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8194): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[345247]" dev="sockfs" ino=345247 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.465:7359): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[317506]" dev="sockfs" ino=317506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.059:7381): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.763:6790): avc: denied { open } for pid=25523 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.321:8769): avc: denied { read } for pid=41370 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7510): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7394): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[313231]" dev="sockfs" ino=313231 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8804): avc: denied { read } for pid=34150 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7470): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50085 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.530:8356): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8547): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7734): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8399): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7730): avc: denied { search } for pid=34150 comm="node_exporter" name="diff" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8554): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6755): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.880:8671): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7818): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7444): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7790): avc: denied { write } for pid=74744 comm="msgr-worker-2" laddr=172.21.15.38 lport=48866 faddr=172.21.15.175 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8800): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7015): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.438:7021): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.465:8785): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.060:8222): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7393): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=42436 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.060:8696): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8087): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8127): avc: denied { read } for pid=40781 comm="grafana-server" name="png" dev="sda1" ino=1970477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.075:7056): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7703): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=57268 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8336): avc: denied { write } for pid=74283 comm="msgr-worker-0" laddr=172.21.15.38 lport=55220 faddr=172.21.15.175 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7766): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.610:8770): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7468): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7443): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.835:8161): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { open } for pid=56187 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6628): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.996:8166): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6688): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { open } for pid=44966 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8015): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[336848]" dev="sockfs" ino=336848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7807): avc: denied { read } for pid=40781 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051583.059:7072): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8778): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7111): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051787.830:8117): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.827:7821): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051786.396:8116): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.062:7481): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051721.814:7764): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.060:8089): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8416): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.069:8708): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7728): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8870): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.537:8790): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6732): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.718:8157): avc: denied { append } for pid=25150 comm="log" path="/var/log/ceph/ceph-mon.smithi038.log" dev="sda1" ino=396143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.019:8146): avc: denied { read } for pid=25150 comm="rocksdb:high0" name="000022.sst" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7372): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.129:7409): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[263139]" dev="sockfs" ino=263139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7015): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.437:6554): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.891:8162): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8085): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.467:8153): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8849): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.988:8775): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.471:7716): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.061:8704): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7153): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.766:7335): avc: denied { open } for pid=44966 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.639:8506): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.511:7361): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7832): avc: denied { getattr } for pid=92220 comm="pgrep" path="/proc/25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6624): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7449): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.203:8185): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8813): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.061:8476): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051711.367:7713): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8868): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8337): avc: denied { write } for pid=74283 comm="msgr-worker-2" laddr=172.21.15.38 lport=48826 faddr=172.21.15.175 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { search } for pid=25523 comm="mgr-fin" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { open } for pid=56187 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7804): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.292:7273): avc: denied { read } for pid=74283 comm="msgr-worker-1" path="pipe:[267013]" dev="pipefs" ino=267013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6726): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7317): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8685): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.880:8670): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051592.767:7132): avc: denied { getattr } for pid=25150 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=49669 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8860): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8886): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051708.981:7674): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.059:6802): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051937.440:8822): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7462): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051854.887:8446): avc: denied { search } for pid=25523 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8682): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7380): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8389): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8417): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051572.760:7024): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6689): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.510:7876): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051725.479:7782): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051965.670:8931): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051590.465:7120): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6731): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6972): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7383): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.237:7874): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7142): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6794): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7851): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8804): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7130): avc: denied { read } for pid=25150 comm="rstore_compact" name="253:4" dev="sysfs" ino=49632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7651): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8740): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.464:7355): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.466:7704): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[326926]" dev="sockfs" ino=326926 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7750): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7854): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7833): avc: denied { open } for pid=92220 comm="pgrep" path="/proc/25150/status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7317): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6776): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.830:8065): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.504:7084): avc: denied { read } for pid=25523 comm="msgr-worker-1" path="socket:[209341]" dev="sockfs" ino=209341 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.814:7781): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8389): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8778): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.062:8555): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7834): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.639:8505): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6728): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8802): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8200): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.588:7500): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8204): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6769): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.060:7867): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8080): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.009:6990): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.060:8879): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6728): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7416): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051496.438:6675): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.437:6554): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051581.112:7062): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.955:8678): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051938.041:8827): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051711.471:7715): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.639:8506): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8519): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.510:8126): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.120:8106): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.765:7720): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6577): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.059:8542): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8714): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6721): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.281:6694): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8546): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8388): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051522.748:6793): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8808): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.465:8497): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8689): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.439:6970): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6614): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.062:7482): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.818:7495): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.027:8765): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8394): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.053:8486): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051797.996:8145): avc: denied { create } for pid=25150 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051955.566:8911): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.156:6747): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.040:7436): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.059:7729): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7732): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7111): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7817): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051854.095:8437): avc: denied { read } for pid=25150 comm="msgr-worker-1" path="socket:[209969]" dev="sockfs" ino=209969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8758): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.062:8884): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7469): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051509.784:6700): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.453:7517): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051942.883:8861): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.345:8133): avc: denied { setopt } for pid=40781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7140): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8778): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.439:7417): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7067): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051856.437:8453): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051585.137:7105): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.034:7404): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7745): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8084): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.964:6714): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.394:7341): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6612): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.063:8820): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8556): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7003): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.816:7725): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.438:8900): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051592.776:7133): avc: denied { read } for pid=25150 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6616): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7475): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.437:7348): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052030.675:8968): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051490.525:6567): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7731): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7139): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7466): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.040:7436): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.789:8444): avc: denied { write } for pid=56187 comm="tp_osd_tp" path="pipe:[219359]" dev="pipefs" ino=219359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8519): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6609): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051950.464:8907): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=48029 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.439:8454): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8520): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051495.034:6672): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8546): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8214): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.836:8105): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.438:8900): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7094): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6613): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051857.867:8456): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7649): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8413): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8038): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.439:8041): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7859): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.480:7633): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8849): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.438:8036): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8091): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.146:7491): avc: denied { read } for pid=50713 comm="msgr-worker-2" path="pipe:[200469]" dev="pipefs" ino=200469 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.438:6557): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7742): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50015 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.063:7017): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8215): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=29967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.718:8155): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8517): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.727:6772): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.049:8848): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051492.742:6606): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7727): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.566:7427): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8551): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051715.566:7759): avc: denied { read } for pid=42730 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051494.239:6664): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.027:8765): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051801.477:8198): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.438:7296): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7486): avc: denied { getattr } for pid=89174 comm="pgrep" path="/proc/25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.102:8046): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7148): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051531.771:6819): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8202): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051950.464:8908): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[370087]" dev="sockfs" ino=370087 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6732): avc: denied { read } for pid=34150 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.748:6575): avc: denied { open } for pid=56187 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7015): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.815:7650): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.156:6746): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8917): avc: denied { connect } for pid=25523 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.464:7115): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.740:8664): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.720:8346): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7747): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.345:8134): avc: denied { name_connect } for pid=40781 comm="grafana-server" dest=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051796.437:8142): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6619): avc: denied { read } for pid=34150 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.060:7386): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.715:6704): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6707): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.510:7876): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.059:8125): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.059:7731): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.986:8902): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7479): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8539): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8211): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.464:6564): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[287806]" dev="sockfs" ino=287806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8078): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8544): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8549): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6768): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { search } for pid=25523 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051508.429:6695): avc: denied { write } for pid=77272 comm="ceph_timer" path="pipe:[269127]" dev="pipefs" ino=269127 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7839): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.729:7645): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.464:7117): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.764:6659): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051723.062:7780): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.676:8064): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8398): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.059:7148): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { create } for pid=40781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8397): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.727:6706): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8739): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8541): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6690): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7145): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8687): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8363): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { read } for pid=56187 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.964:6712): avc: denied { write } for pid=25150 comm="safe_timer" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051940.438:8831): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7853): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7805): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7509): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.207:7268): avc: denied { read } for pid=41370 comm="msgr-worker-1" path="socket:[224121]" dev="sockfs" ino=224121 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.438:8419): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7855): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.006:8448): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.060:7515): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.283:8491): avc: denied { read } for pid=56187 comm="msgr-worker-2" path="pipe:[219361]" dev="pipefs" ino=219361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8895): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8120): avc: denied { read } for pid=95286 comm="pgrep" name="status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.438:8900): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051496.438:6674): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7029): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8478): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051708.419:7656): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { read } for pid=44966 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6719): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.354:8136): avc: denied { getattr } for pid=40781 comm="grafana-server" laddr=172.21.15.38 lport=38976 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.109:8007): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.537:8762): avc: denied { read } for pid=41370 comm="msgr-worker-2" path="pipe:[177754]" dev="pipefs" ino=177754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.466:8196): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.565:8018): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7316): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052525.702:8989): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051786.396:8116): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7143): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051577.760:7059): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.819:7820): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.566:7428): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8868): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7419): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8697): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.059:8875): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.062:7484): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051970.672:8953): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { read } for pid=50713 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8688): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8866): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6622): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8210): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7846): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8701): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.469:7422): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8871): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.217:8186): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7085): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7395): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[313858]" dev="sockfs" ino=313858 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6738): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.125:7104): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8675): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.439:7023): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8803): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.062:7483): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8362): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7847): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.660:7429): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051795.989:8141): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7387): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051942.211:8856): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8701): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7748): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051938.077:8828): avc: denied { read } for pid=41370 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7417): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051579.100:7060): avc: denied { open } for pid=25523 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6691): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8897): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8502): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[351108]" dev="sockfs" ino=351108 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051715.114:7758): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.438:7296): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8797): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7805): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7847): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8362): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8077): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.581:6569): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { open } for pid=44966 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { search } for pid=25523 comm="mgr-fin" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.438:7109): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051871.439:8521): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.469:7421): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7737): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8206): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8463): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.289:8008): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8890): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8896): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7368): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.716:7990): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7378): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.590:8063): avc: denied { open } for pid=50713 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7112): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7043): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7465): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.061:8818): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7054): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7767): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8759): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.060:7513): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.753:6754): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.743:8841): avc: denied { write } for pid=25150 comm="ms_dispatch" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7488): avc: denied { getattr } for pid=89174 comm="pgrep" path="/proc/25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8859): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.469:7420): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7831): avc: denied { open } for pid=92220 comm="pgrep" path="/proc/25126/status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051503.061:6693): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7776): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7413): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.321:8769): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.061:7074): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7154): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.137:7105): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051854.789:8443): avc: denied { write } for pid=56187 comm="tp_osd_tp" path="pipe:[219361]" dev="pipefs" ino=219361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7070): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7042): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8211): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.062:8882): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.827:7822): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051510.755:6702): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8216): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.059:8470): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7010): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[303278]" dev="sockfs" ino=303278 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7065): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6555): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.125:7103): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7266): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.097:8005): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.283:8490): avc: denied { write } for pid=56187 comm="osd_srv_heartbt" path="pipe:[219361]" dev="pipefs" ino=219361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7036): avc: denied { read } for pid=34150 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.759:6658): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7138): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.718:8159): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { read } for pid=56187 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8887): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7489): avc: denied { open } for pid=89174 comm="pgrep" path="/proc/25150/status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7290): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.061:8818): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { search } for pid=25523 comm="mgr-fin" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7729): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.062:7389): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051960.669:8915): avc: denied { create } for pid=25523 comm="msgr-worker-2" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7131): avc: denied { read } for pid=25150 comm="rstore_compact" name="logical_block_size" dev="sysfs" ino=49669 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.465:8782): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6721): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8338): avc: denied { read } for pid=41370 comm="msgr-worker-0" path="socket:[267017]" dev="sockfs" ino=267017 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7418): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { open } for pid=50713 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.807:7501): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.464:7119): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.439:8454): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8811): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7004): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8691): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7460): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.465:6683): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.283:8493): avc: denied { write } for pid=56187 comm="msgr-worker-0" laddr=172.21.15.38 lport=58098 faddr=172.21.15.38 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7471): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8498): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.007:7696): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8556): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.062:8095): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8516): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.727:6773): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.271:6748): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7291): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051636.292:7272): avc: denied { write } for pid=74283 comm="ceph_timer" path="pipe:[267013]" dev="pipefs" ino=267013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8203): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.234:8858): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051653.030:7400): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051523.058:6796): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.465:8496): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.481:7635): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.741:8666): avc: denied { write } for pid=25150 comm="ms_dispatch" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8891): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6756): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051660.465:7454): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[318987]" dev="sockfs" ino=318987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.438:8418): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8543): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.354:8135): avc: denied { getopt } for pid=40781 comm="grafana-server" laddr=172.21.15.38 lport=38976 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051642.798:7363): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051797.996:8145): avc: denied { add_name } for pid=25150 comm="rstore_compact" name="000021.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6972): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7369): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051931.367:8794): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.464:7353): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8205): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.437:6639): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { search } for pid=44966 comm="safe_timer" name="diff" dev="sda1" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051520.465:6789): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[287589]" dev="sockfs" ino=287589 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7773): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { search } for pid=25523 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.059:8538): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051950.464:8904): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6623): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.438:6697): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.438:7721): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.804:7336): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.525:6567): avc: denied { open } for pid=56187 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8348): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.008:7016): avc: denied { search } for pid=41370 comm="safe_timer" name="diff" dev="sda1" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051500.465:6680): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7520): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051924.526:8741): avc: denied { write } for pid=50713 comm="msgr-worker-0" laddr=172.21.15.38 lport=57534 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7817): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.464:6563): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=37392 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8112): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8921): avc: denied { read } for pid=25523 comm="msgr-worker-1" path="socket:[364981]" dev="sockfs" ino=364981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8204): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.052:6546): avc: denied { read } for pid=44966 comm="msgr-worker-1" path="pipe:[184257]" dev="pipefs" ino=184257 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7385): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7079): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.729:7644): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8348): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6716): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7295): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8174): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6778): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.063:6995): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[146477]" dev="sockfs" ino=146477 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.437:8452): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051856.439:8454): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7087): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8039): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8402): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6613): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8120): avc: denied { open } for pid=95286 comm="pgrep" path="/proc/25126/status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.039:6938): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8040): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051715.566:7761): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8922): avc: denied { getattr } for pid=25523 comm="msgr-worker-2" laddr=172.21.15.38 lport=6800 faddr=172.21.15.38 fport=58508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.060:8473): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6795): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7088): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8545): avc: denied { read } for pid=34150 comm="node_exporter" name="ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8173): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7366): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8919): avc: denied { write } for pid=25523 comm="msgr-worker-2" laddr=172.21.15.38 lport=58506 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6605): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051656.003:7431): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6569): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8757): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8386): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.060:6735): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8807): avc: denied { read } for pid=34150 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.060:8545): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8539): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8806): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051654.540:7402): avc: denied { write } for pid=56187 comm="msgr-worker-1" laddr=172.21.15.38 lport=47846 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7643): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051858.011:8457): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8809): avc: denied { read } for pid=34150 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.350:8355): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6604): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051529.764:6808): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7458): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.510:7086): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051579.482:7061): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6768): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8082): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7727): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.464:7115): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.866:8363): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6932): avc: denied { open } for pid=56187 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.465:8467): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[352606]" dev="sockfs" ino=352606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8865): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8071): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.464:8190): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.061:8705): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.062:8097): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7385): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8520): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051512.715:6703): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { search } for pid=25523 comm="mgr-fin" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.510:8342): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.354:8138): avc: denied { read } for pid=40781 comm="grafana-server" path="socket:[337809]" dev="sockfs" ino=337809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8037): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051799.437:8170): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.464:7352): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.061:8702): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { search } for pid=56187 comm="safe_timer" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.060:7515): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7050): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.188:7799): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.061:7516): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8416): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.136:7410): avc: denied { append } for pid=25523 comm="log" path="/var/log/ceph/ceph-mgr.smithi038.bbeteq.log" dev="sda1" ino=396149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.942:7757): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6794): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7137): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6634): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051573.060:7045): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.923:8847): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6626): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.465:6685): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=48263 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8392): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.764:6659): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.059:7146): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8210): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8080): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7068): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7680): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051586.437:7108): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.437:6555): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.059:7504): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7127): avc: denied { write } for pid=25150 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.816:7725): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7787): avc: denied { read } for pid=74744 comm="msgr-worker-1" path="pipe:[269468]" dev="pipefs" ino=269468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7833): avc: denied { read } for pid=92220 comm="pgrep" name="status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7474): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051851.720:8346): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7146): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { write open } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.465:7121): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.004:8681): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7371): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8810): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.125:7103): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.103:8515): avc: denied { open } for pid=41370 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8696): avc: denied { read } for pid=34150 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.721:8043): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7138): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.639:8506): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.714:8523): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6739): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.059:8469): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6620): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6727): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7087): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.060:8695): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8690): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.382:7287): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052750.714:9019): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { search } for pid=50713 comm="safe_timer" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.188:7799): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8518): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.061:8705): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.439:8521): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8537): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.066:8148): avc: denied { search } for pid=25150 comm="rocksdb:low0" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8863): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6611): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8161): avc: denied { open } for pid=56187 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7472): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.207:7270): avc: denied { write } for pid=41370 comm="msgr-worker-1" laddr=172.21.15.38 lport=6806 faddr=172.21.15.175 fport=47094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6799): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.217:8187): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7996): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8396): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6627): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8161): avc: denied { read } for pid=56187 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7028): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8110): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8111): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051802.833:8200): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7067): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.266:6996): avc: denied { write } for pid=74283 comm="safe_timer" path="pipe:[267014]" dev="pipefs" ino=267014 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.590:8063): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8835): avc: denied { append } for pid=44966 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.464:7357): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=48656 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7868): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8800): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.727:6771): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.670:9044): avc: denied { shutdown } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58508 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051709.438:7675): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.348:6585): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.464:8189): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.063:7869): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7034): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.991:7994): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.027:8763): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051566.427:6925): avc: denied { write } for pid=77272 comm="safe_timer" path="pipe:[269128]" dev="pipefs" ino=269128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8807): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7071): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7465): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.466:7455): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[313340]" dev="sockfs" ino=313340 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.530:8358): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7680): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7079): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6604): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.759:6946): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7746): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7373): avc: denied { read } for pid=34150 comm="node_exporter" name="xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { search } for pid=40781 comm="grafana-server" name="diff" dev="sda1" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.059:7736): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.382:7286): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8759): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.063:7017): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.639:8506): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6770): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.437:6638): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8191): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8694): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7791): avc: denied { read } for pid=41370 comm="msgr-worker-2" path="socket:[267896]" dev="sockfs" ino=267896 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8805): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.059:8219): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.109:8007): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.830:8104): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8074): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.720:8346): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7679): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.066:8149): avc: denied { remove_name } for pid=25150 comm="rocksdb:low0" name="000022.sst" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.063:6994): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=47474 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.060:8090): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6973): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.530:8357): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8859): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051500.465:6686): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[288207]" dev="sockfs" ino=288207 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.693:8129): avc: denied { remove_name } for pid=40781 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051931.037:8793): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8109): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051587.762:7112): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.032:7278): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.060:8880): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051595.565:7159): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8889): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051851.264:8330): avc: denied { append } for pid=50713 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051710.466:7706): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.766:7335): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8201): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8172): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.816:7726): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8073): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8404): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8891): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6945): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.061:6692): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.427:6926): avc: denied { read } for pid=77272 comm="msgr-worker-2" path="pipe:[269128]" dev="pipefs" ino=269128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7149): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7506): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.439:8041): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.148:6584): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.060:6732): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.060:8473): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.469:7421): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8084): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.526:8742): avc: denied { read } for pid=25523 comm="msgr-worker-1" path="socket:[209341]" dev="sockfs" ino=209341 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051950.465:8909): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[370087]" dev="sockfs" ino=370087 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.123:8712): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.052:6544): avc: denied { write } for pid=44966 comm="safe_timer" path="pipe:[184257]" dev="pipefs" ino=184257 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.881:8673): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.062:7779): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6614): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.062:8707): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051583.061:7075): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8362): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051942.883:8859): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8014): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=53889 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6616): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8417): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.566:7426): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.439:6768): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.439:7723): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051796.438:8144): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7987): avc: denied { open } for pid=56187 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.437:6637): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051868.639:8484): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.060:8546): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.765:7754): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.137:7105): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.590:8063): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8212): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.693:8129): avc: denied { unlink } for pid=40781 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.797:7316): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8225): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.464:6560): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8083): avc: denied { read } for pid=34150 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.716:8839): avc: denied { write } for pid=50713 comm="msgr-worker-2" laddr=172.21.15.38 lport=6824 faddr=172.21.15.175 fport=40858 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8670): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7852): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.120:8106): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7266): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.059:8218): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6717): avc: denied { search } for pid=34150 comm="node_exporter" name="diff" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.156:6747): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7047): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7291): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { read } for pid=56187 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8500): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=33318 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051955.566:8910): avc: denied { read } for pid=42730 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6735): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8542): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.109:8007): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7851): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.217:8186): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7451): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8211): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051577.760:7059): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7156): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8688): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.765:7756): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.464:6559): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6947): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8757): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051523.058:6796): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051652.785:7399): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8696): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051717.817:7762): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7634): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051709.438:7678): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051798.718:8158): avc: denied { write } for pid=25150 comm="ms_dispatch" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.975:8773): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7505): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051492.606:6603): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051670.439:7497): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.438:6556): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8676): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051854.239:8439): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.438:6558): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1574969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8550): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.465:6681): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7862): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8204): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7127): avc: denied { open } for pid=25150 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.137:7105): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051960.669:8920): avc: denied { setopt } for pid=25523 comm="msgr-worker-0" laddr=172.21.15.38 lport=6800 faddr=172.21.15.38 fport=58506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6797): avc: denied { read } for pid=34150 comm="node_exporter" name="xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051529.695:6807): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7770): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.364:7058): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051654.540:7403): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[221448]" dev="sockfs" ino=221448 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6784): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051495.187:6673): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7031): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6635): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051587.762:7112): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7835): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7033): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051867.869:8483): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051931.012:8792): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051941.743:8842): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8693): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6707): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.466:7125): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7767): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6783): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.438:7022): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051583.058:7069): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7739): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.062:8095): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7370): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051862.018:8468): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8395): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.021:8349): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.060:7151): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7848): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8079): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.129:7406): avc: denied { write } for pid=74744 comm="safe_timer" path="pipe:[269468]" dev="pipefs" ino=269468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.466:8786): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8674): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8383): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8199): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7734): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8224): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051672.807:7502): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8891): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7861): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6571): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.332:8334): avc: denied { read } for pid=74283 comm="msgr-worker-1" path="pipe:[267013]" dev="pipefs" ino=267013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7479): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051932.883:8796): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051531.226:6818): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.464:6559): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051566.427:6924): avc: denied { read } for pid=25150 comm="msgr-worker-1" path="socket:[166308]" dev="sockfs" ino=166308 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7380): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.871:8534): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7028): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.374:7411): avc: denied { read } for pid=50713 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051520.763:6791): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7468): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=36916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051494.239:6664): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051658.455:7447): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051590.464:7118): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6765): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051509.784:6699): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.063:8560): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.027:8763): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7788): avc: denied { write } for pid=74744 comm="msgr-worker-0" laddr=172.21.15.38 lport=55260 faddr=172.21.15.175 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8882): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.437:8898): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.465:6565): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[286867]" dev="sockfs" ino=286867 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7292): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8687): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7818): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.807:7502): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.022:8525): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.058:8868): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7065): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7151): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051867.751:8482): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7772): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6632): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.439:7419): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7364): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.059:8874): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8010): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8009): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7861): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7136): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7006): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7414): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8850): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.836:8105): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.555:7492): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051860.464:8459): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051587.762:7111): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.075:7057): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7859): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051572.760:7024): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.510:7088): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051570.776:7015): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.439:8041): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051884.399:8561): avc: denied { write } for pid=40781 comm="grafana-server" path="socket:[337809]" dev="sockfs" ino=337809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.975:8772): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8013): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.465:7124): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[302600]" dev="sockfs" ino=302600 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6766): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7634): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7039): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.239:8131): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8365): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.061:7778): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7831): avc: denied { read } for pid=92220 comm="pgrep" name="status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051851.332:8333): avc: denied { write } for pid=74283 comm="ceph_timer" path="pipe:[267013]" dev="pipefs" ino=267013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8913): avc: denied { shutdown } for pid=25523 comm="msgr-worker-2" laddr=172.21.15.38 lport=57224 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.439:7723): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7038): avc: denied { read } for pid=34150 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051595.565:7158): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.818:7494): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.061:8819): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051642.798:7363): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7048): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051509.784:6699): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7741): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6610): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8406): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051579.100:7060): avc: denied { read } for pid=25523 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7729): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.309:7784): avc: denied { append } for pid=41370 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.060:7386): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8122): avc: denied { open } for pid=95286 comm="pgrep" path="/proc/25150/status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8404): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051950.464:8903): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8065): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.438:7804): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.059:8542): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051530.465:6812): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.059:8471): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7280): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.796:7816): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { dac_override } for pid=40781 comm="grafana-server" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051712.438:7721): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.875:8420): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.741:8665): avc: denied { append } for pid=25150 comm="log" path="/var/log/ceph/ceph-mon.smithi038.log" dev="sda1" ino=396143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.525:6567): avc: denied { read } for pid=56187 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.438:7722): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.437:7291): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.060:7471): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.510:7877): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8223): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8737): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7680): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6767): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051942.883:8862): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7145): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7140): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8694): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8836): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.039:6939): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051785.986:8114): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.027:8765): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8814): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051857.867:8455): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6785): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.470:7714): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8036): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051871.439:8522): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7857): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.438:7802): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8360): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6726): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.438:7109): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.039:6937): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.729:7646): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.748:6575): avc: denied { read } for pid=56187 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7743): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.136:7077): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8393): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.438:6965): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051730.465:7838): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6618): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.438:8418): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6739): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.345:8132): avc: denied { create } for pid=40781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.062:6632): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7003): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8077): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051500.465:6679): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.801:7443): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7480): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051943.062:8885): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.988:8774): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051726.766:7793): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051572.760:7025): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7034): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.466:8016): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[338073]" dev="sockfs" ino=338073 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.367:8340): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.430:7698): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8887): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6724): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6569): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.439:7723): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8226): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8895): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.438:7110): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.561:7106): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.483:7809): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8401): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="overlay" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.020:8147): avc: denied { remove_name } for pid=25150 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6605): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051656.034:7432): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.835:8160): avc: denied { search } for pid=56187 comm="safe_timer" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8405): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.750:6753): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8860): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7154): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8074): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8075): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.060:8221): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.606:6602): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.438:6766): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051782.830:8066): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.816:7725): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.481:7636): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8806): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7013): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7047): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.121:8047): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8813): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8532): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.020:8147): avc: denied { unlink } for pid=25150 comm="rocksdb:high0" name="000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.062:6737): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051570.466:7011): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7129): avc: denied { getattr } for pid=25150 comm="rstore_compact" path="/sys/dev/block/253:4" dev="sysfs" ino=49632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.438:8040): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8553): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.437:8414): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051800.000:8178): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051713.060:7743): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7153): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6722): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6779): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.465:6566): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7810): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051784.120:8106): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8884): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7863): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8073): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051572.760:7024): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8549): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.465:8496): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7051): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7370): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.897:8821): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8815): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8036): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7857): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8072): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8478): avc: denied { search } for pid=25523 comm="safe_timer" name="diff" dev="sda1" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.437:8415): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.439:8521): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.660:7430): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7343): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.480:7632): avc: denied { write } for pid=25150 comm="msgr-worker-2" laddr=172.21.15.38 lport=3300 faddr=172.21.15.175 fport=56714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.836:8105): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7064): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7069): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.060:8087): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.670:9043): avc: denied { read } for pid=25523 comm="msgr-worker-1" path="socket:[364981]" dev="sockfs" ino=364981 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051637.797:7319): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7029): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8459): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8122): avc: denied { read } for pid=95286 comm="pgrep" name="status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.437:7348): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7817): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.439:6970): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.464:7351): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7368): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8081): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6735): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052140.681:8969): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051490.438:6556): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7749): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.739:6775): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7279): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051925.537:8761): avc: denied { write } for pid=56187 comm="tp_osd_tp" path="pipe:[219361]" dev="pipefs" ino=219361 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8192): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.060:8222): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.465:8783): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8867): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.765:7754): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6628): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051950.464:8906): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051519.863:6782): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7474): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8387): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="overlay" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051938.077:8828): avc: denied { open } for pid=41370 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.716:7991): avc: denied { write } for pid=25150 comm="ms_dispatch" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051590.464:7116): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8881): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8799): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.754:6576): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051523.059:6803): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8801): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.464:6559): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7857): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.504:7081): avc: denied { write } for pid=50713 comm="safe_timer" path="pipe:[200467]" dev="pipefs" ino=200467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8806): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.504:7083): avc: denied { write } for pid=50713 comm="msgr-worker-0" laddr=172.21.15.38 lport=57534 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.469:7421): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7458): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { read } for pid=50713 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7745): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8394): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7377): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.059:6801): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.058:8124): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.525:6567): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.438:7021): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.063:8820): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8690): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8532): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051950.464:8903): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051781.997:8044): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051802.833:8199): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7040): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.765:7753): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7512): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7845): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.062:6737): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051863.060:8475): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051571.439:7023): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7034): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8553): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.482:7808): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6723): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.727:8361): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8092): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8465): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=49384 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051517.748:6776): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.007:7697): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8860): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051728.414:7829): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051715.566:7760): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.061:8818): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051801.366:8197): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.997:8045): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.060:8403): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.114:8531): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8553): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051799.437:8169): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051570.465:7005): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051937.440:8823): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.955:8678): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { open } for pid=56187 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8516): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.566:7426): avc: denied { open } for pid=42730 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8112): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.059:7382): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.097:8005): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.058:7366): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.815:7650): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8700): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8078): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7114): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.429:6696): avc: denied { read } for pid=77272 comm="msgr-worker-1" path="pipe:[269127]" dev="pipefs" ino=269127 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7770): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8757): avc: denied { search } for pid=40781 comm="grafana-server" name="diff" dev="sda1" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.058:7135): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.466:7705): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[326150]" dev="sockfs" ino=326150 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.712:9015): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051566.427:6923): avc: denied { append } for pid=50713 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.041:7437): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.059:8799): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.095:8436): avc: denied { write } for pid=50713 comm="msgr-worker-1" laddr=172.21.15.38 lport=47776 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8674): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.838:8130): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051570.465:7009): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[304241]" dev="sockfs" ino=304241 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051585.125:7103): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7294): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.039:6938): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8699): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.229:8188): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8675): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8865): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6944): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8207): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8413): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.146:7490): avc: denied { write } for pid=50713 comm="tp_osd_tp" path="pipe:[200469]" dev="pipefs" ino=200469 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051797.996:8145): avc: denied { open } for pid=25150 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.986:8069): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.464:7356): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7367): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6767): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7863): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.021:8350): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051568.439:6970): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7026): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.391:7002): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.059:8399): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { search } for pid=25150 comm="safe_timer" name="diff" dev="sda1" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051672.807:7503): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.775:6792): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.069:6745): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.061:8407): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.062:8559): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051500.466:6687): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[283583]" dev="sockfs" ino=283583 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8385): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7733): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7448): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.439:6768): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8208): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7379): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7147): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051671.652:7499): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6609): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7376): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7049): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.018:8513): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051496.439:6676): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.060:6736): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.766:6974): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.161:8438): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.382:7287): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7460): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051517.748:6777): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7044): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.765:7755): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.172:8048): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8394): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7026): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6941): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7834): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.059:8471): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6788): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[287589]" dev="sockfs" ino=287589 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.671:7493): avc: denied { search } for pid=44966 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051715.566:7759): avc: denied { open } for pid=42730 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.566:7426): avc: denied { read } for pid=42730 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8362): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051530.464:6811): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.438:7296): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7063): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7079): avc: denied { read } for pid=50713 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051950.464:8905): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.382:7287): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7131): avc: denied { open } for pid=25150 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=49669 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7807): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.063:6741): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.022:8526): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051873.061:8554): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { open } for pid=50713 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.465:8496): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051722.818:7765): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.061:8706): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051587.762:7111): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.763:6790): avc: denied { read } for pid=25523 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.060:7384): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.062:7481): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051745.439:7878): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8173): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.439:7417): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7700): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7139): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.059:8213): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8076): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8532): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6612): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.627:8481): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8759): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.715:6703): avc: denied { search } for pid=25523 comm="safe_timer" name="diff" dev="sda1" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8688): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7741): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { create } for pid=40781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.059:7035): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.059:7768): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.052:6545): avc: denied { append } for pid=44966 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.283:8494): avc: denied { read } for pid=44966 comm="msgr-worker-1" path="socket:[218869]" dev="sockfs" ino=218869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6945): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8209): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7373): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051670.438:7496): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.071:8408): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.097:8006): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.059:7489): avc: denied { search } for pid=89174 comm="pgrep" name="25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7830): avc: denied { getattr } for pid=92220 comm="pgrep" path="/proc/25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051577.760:7059): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051794.562:8139): avc: denied { read } for pid=25523 comm="msgr-worker-0" path="socket:[165222]" dev="sockfs" ino=165222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8390): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.120:8107): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8815): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6932): avc: denied { read } for pid=56187 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6708): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="overlay" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.438:8516): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6618): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7801): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.059:8220): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052455.699:8985): avc: denied { write } for pid=25523 comm="msgr-worker-1" laddr=172.21.15.38 lport=58510 faddr=172.21.15.38 fport=6800 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051636.204:7266): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051932.882:8795): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6615): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6718): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7041): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7369): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.819:7819): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8093): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051569.867:7001): avc: denied { search } for pid=25523 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.059:7507): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.062:8558): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051713.060:7743): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.555:7492): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.818:7494): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.963:8680): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8537): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8399): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6932): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.716:8838): avc: denied { read } for pid=41370 comm="msgr-worker-0" path="socket:[236174]" dev="sockfs" ino=236174 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8834): avc: denied { search } for pid=44966 comm="safe_timer" name="diff" dev="sda1" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.464:6561): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7142): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7732): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051672.807:7501): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7042): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.061:6630): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6728): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6717): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7007): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7738): avc: denied { read } for pid=34150 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051583.058:7066): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7774): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=36916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7014): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6720): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.439:7681): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8065): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051780.465:8011): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.464:7354): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.438:7676): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.815:7650): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.594:6572): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8541): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.715:6704): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.865:7795): avc: denied { read } for pid=56187 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6625): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051494.380:6668): avc: denied { read } for pid=41370 comm="msgr-worker-0" path="socket:[224118]" dev="sockfs" ino=224118 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8073): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.437:8111): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.438:6697): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.060:7155): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051927.882:8780): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8899): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6604): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8080): avc: denied { read } for pid=34150 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.975:8772): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.239:8131): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7986): avc: denied { append } for pid=56187 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396225 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.027:8765): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.059:7028): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.217:8186): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7864): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051802.833:8199): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051866.615:8479): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7478): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051796.438:8144): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7316): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6717): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.057:6608): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6611): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8694): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=36729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.052:6547): avc: denied { write } for pid=44966 comm="msgr-worker-1" laddr=172.21.15.38 lport=57460 faddr=172.21.15.38 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8009): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051654.511:7401): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7806): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051709.439:7679): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8715): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.439:6770): avc: denied { read } for pid=40781 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1574966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.061:8703): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051530.834:6814): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.061:7477): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6614): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051711.471:7716): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.060:7471): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051856.437:8452): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.354:8137): avc: denied { write } for pid=40781 comm="grafana-server" path="socket:[337809]" dev="sockfs" ino=337809 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8088): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.988:6583): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.063:7018): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7376): avc: denied { read } for pid=34150 comm="node_exporter" name="ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8870): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7444): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.439:7023): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051569.266:6997): avc: denied { read } for pid=74283 comm="msgr-worker-2" path="pipe:[267014]" dev="pipefs" ino=267014 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8224): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.866:8363): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.438:6640): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1574971 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7745): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7845): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8205): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8674): avc: denied { open } for pid=25523 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.438:8901): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574970 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.827:7822): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8462): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051857.867:8455): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.059:6616): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7648): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.061:7055): avc: denied { fork } for pid=34150 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6719): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051650.464:7391): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051867.869:8483): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.058:8872): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7149): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.510:7877): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051855.234:8447): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6553): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8739): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.083:7796): avc: denied { search } for pid=50713 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051497.774:6678): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="overlay" ino=1970645 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c812 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6742): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.615:8480): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.464:8189): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.437:8895): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.327:7078): avc: denied { search } for pid=50713 comm="safe_timer" name="diff" dev="sda1" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.059:7463): avc: denied { read } for pid=34150 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.132:8108): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.062:6737): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.819:7818): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7741): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7860): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8540): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051667.976:7485): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6568): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8461): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051940.466:8832): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.729:7645): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8674): avc: denied { read } for pid=25523 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.715:6705): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.058:7137): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.815:7652): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.438:7021): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.827:7822): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8210): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051928.032:8781): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7046): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7855): avc: denied { read } for pid=34150 comm="node_exporter" name="eno1" dev="sysfs" ino=36721 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8683): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.060:7514): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6965): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8863): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.058:6611): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8893): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6724): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.581:6569): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8391): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7374): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.097:8005): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7775): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6626): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.483:7809): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.870:8533): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7776): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051857.867:8455): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.758:6757): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.239:8439): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { search } for pid=25523 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051960.669:8917): avc: denied { name_connect } for pid=25523 comm="msgr-worker-2" dest=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unreserved_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616051584.778:7095): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.438:6763): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051727.484:7811): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7042): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.060:8878): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051745.979:7879): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051710.563:7707): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051794.345:8134): avc: denied { connect } for pid=40781 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.438:7412): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.058:8386): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7445): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051670.439:7497): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8695): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.706:7987): avc: denied { read } for pid=56187 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.882:7993): avc: denied { search } for pid=25523 comm="mgr-fin" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051669.059:7487): avc: denied { read } for pid=89174 comm="pgrep" name="status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { write } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="overlay" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.465:7358): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[313147]" dev="sockfs" ino=313147 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051661.367:7457): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8869): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7487): avc: denied { open } for pid=89174 comm="pgrep" path="/proc/25126/status" dev="proc" ino=124126 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051853.438:8418): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7027): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8881): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8533): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6969): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051931.012:8791): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051673.059:7511): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8779): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7862): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8398): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.061:8225): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.492:7642): avc: denied { read } for pid=44966 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.059:7856): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051788.932:8118): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.059:7508): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8385): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8801): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051569.867:7001): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051790.465:8123): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.059:6804): avc: denied { search } for pid=34150 comm="node_exporter" name="fs" dev="proc" ino=161749 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051731.366:7844): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051955.566:8912): avc: denied { getattr } for pid=42730 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7045): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.606:6602): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051523.060:6806): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7865): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.466:8787): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=55609 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7749): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7473): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.530:8357): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8385): avc: denied { read } for pid=34150 comm="node_exporter" name="stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.061:8704): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.439:7298): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051636.204:7265): avc: denied { open } for pid=50713 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.716:8837): avc: denied { read } for pid=41370 comm="msgr-worker-1" path="socket:[236177]" dev="sockfs" ino=236177 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.060:8405): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6967): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051523.058:6800): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.801:7446): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7699): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.651:8508): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.758:6755): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.469:7421): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051657.041:7438): avc: denied { search } for pid=25126 comm="conmon" name="systemd" dev="tmpfs" ino=14385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051871.438:8516): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.059:8535): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.776:7013): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051709.438:7675): avc: denied { search } for pid=40781 comm="grafana-server" name="/" dev="overlay" ino=1968482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.060:8472): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.931:6711): avc: denied { append } for pid=44966 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.885:8771): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.060:6628): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.382:7288): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.063:7869): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.178:8412): avc: denied { open } for pid=41370 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.066:8149): avc: denied { write } for pid=25150 comm="rocksdb:low0" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051940.438:8830): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051723.059:7771): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051587.762:7113): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051529.863:6810): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.059:8683): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051924.511:8738): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051657.801:7443): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.060:7050): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7279): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.060:8086): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37774 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.059:8798): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7473): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8176): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="sda1" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6719): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.439:8760): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1574965 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8669): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.465:7837): avc: denied { setopt } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7053): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.058:7137): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.465:7008): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=38791 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.437:8172): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051529.766:6809): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="tmpfs" ino=14376 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051586.438:7109): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.061:8228): avc: denied { search } for pid=34150 comm="node_exporter" name="host" dev="sda1" ino=1970467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051854.789:8445): avc: denied { read } for pid=41370 comm="msgr-worker-1" path="pipe:[177753]" dev="pipefs" ino=177753 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.062:8883): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.061:7478): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8091): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051937.440:8823): avc: denied { read } for pid=40781 comm="grafana-server" name="host-details.json" dev="overlay" ino=1574967 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.063:8888): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051523.058:6798): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.438:6764): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6730): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7741): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051586.437:7107): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051856.439:8454): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.060:7149): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.059:8388): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.062:8096): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051783.060:8091): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7317): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7786): avc: denied { write } for pid=74744 comm="ceph_timer" path="pipe:[269468]" dev="pipefs" ino=269468 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.437:8413): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.060:7865): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.058:7852): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.060:7514): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.063:7870): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.054:8851): avc: denied { write } for pid=25126 comm="conmon" name="socket" dev="tmpfs" ino=14667 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051512.747:6708): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.764:6659): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.740:8663): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.060:8879): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051497.744:6677): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8692): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.465:7702): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.964:6713): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.063:7869): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.059:7733): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7141): avc: denied { read } for pid=34150 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.870:8532): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.759:6944): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051923.889:8713): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { write } for pid=40781 comm="grafana-server" name="grafana" dev="overlay" ino=1968308 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051780.465:8009): avc: denied { getattr } for pid=42730 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=180144 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7520): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7489): avc: denied { read } for pid=89174 comm="pgrep" name="status" dev="proc" ino=127371 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8174): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.880:8670): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.697:6943): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051517.748:6776): avc: denied { dac_read_search } for pid=25150 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.283:8492): avc: denied { write } for pid=56187 comm="msgr-worker-2" laddr=172.21.15.38 lport=58832 faddr=172.21.15.38 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7366): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7318): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051942.883:8859): avc: denied { getattr } for pid=25150 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8685): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=161739 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.466:7842): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[326540]" dev="sockfs" ino=326540 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051654.511:7401): avc: denied { search } for pid=40781 comm="grafana-server" name="var" dev="sda1" ino=1968491 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051871.103:8514): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7293): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8549): avc: denied { read } for pid=34150 comm="node_exporter" name="entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { search } for pid=25126 comm="conmon" name="journal" dev="tmpfs" ino=14663 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051852.530:8357): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.797:7316): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6741): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8864): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8122): avc: denied { search } for pid=95286 comm="pgrep" name="25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.766:7789): avc: denied { write } for pid=74744 comm="msgr-worker-1" laddr=172.21.15.38 lport=54484 faddr=172.21.15.38 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.394:7341): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.522:6931): avc: denied { search } for pid=56187 comm="safe_timer" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051592.767:7128): avc: denied { getattr } for pid=25150 comm="rstore_compact" path="/sys" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.479:7630): avc: denied { write } for pid=25150 comm="safe_timer" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051784.438:8113): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.438:8036): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051803.058:8202): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051643.060:7383): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051733.060:7866): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.759:6945): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7096): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051514.739:6774): avc: denied { search } for pid=25523 comm="safe_timer" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051723.059:7769): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8686): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.059:8875): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051508.439:6698): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051730.465:7836): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051851.499:8341): avc: denied { open } for pid=50713 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7803): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051517.748:6777): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.438:6556): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051567.051:6940): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.059:7382): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.993:7995): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051926.321:8769): avc: denied { open } for pid=41370 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051926.995:8776): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7460): avc: denied { search } for pid=34150 comm="node_exporter" name="7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { read } for pid=25523 comm="mgr-fin" name="localtime" dev="sda1" ino=394694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.437:6551): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.058:7850): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.438:8174): avc: denied { read } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051567.289:6942): avc: denied { search } for pid=50713 comm="safe_timer" name="/" dev="overlay" ino=1970664 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c661 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.778:7094): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051530.556:6813): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.963:8679): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051655.482:7423): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051872.870:8533): avc: denied { search } for pid=25150 comm="safe_timer" name="mon.smithi038" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051660.465:7452): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8866): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051779.706:7985): avc: denied { open } for pid=56187 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.607:8128): avc: denied { add_name } for pid=40781 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051922.741:8667): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.060:8812): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051726.766:7792): avc: denied { append } for pid=41370 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7466): avc: denied { open } for pid=34150 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7824): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8836): avc: denied { search } for pid=44966 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051960.669:8918): avc: denied { accept } for pid=25523 comm="msgr-worker-0" lport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.464:6562): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051495.034:6672): avc: denied { open } for pid=50713 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.465:8195): avc: denied { read } for pid=42730 comm="prometheus" path="socket:[342714]" dev="sockfs" ino=342714 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051925.438:8757): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.019:6540): avc: denied { read } for pid=25150 comm="msgr-worker-1" path="socket:[166308]" dev="sockfs" ino=166308 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6725): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051512.747:6709): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.063:6742): avc: denied { search } for pid=34150 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.466:8501): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[352872]" dev="sockfs" ino=352872 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.437:6638): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051513.059:6730): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=36916 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.465:6786): avc: denied { connect } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051642.798:7363): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.059:6617): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051852.542:8359): avc: denied { open } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051873.061:8551): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051669.059:7487): avc: denied { search } for pid=89174 comm="pgrep" name="25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.059:6621): avc: denied { read } for pid=34150 comm="node_exporter" name="ce_count" dev="sysfs" ino=48270 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7751): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051709.438:7675): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051493.058:6614): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051492.742:6605): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051789.087:8120): avc: denied { search } for pid=95286 comm="pgrep" name="25126" dev="proc" ino=124122 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.059:7464): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.479:7629): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.060:6734): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=36917 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.437:6639): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051490.438:6556): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.438:7800): avc: denied { search } for pid=40781 comm="grafana-server" name="dashboards" dev="sda1" ino=1574963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051573.059:7037): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051638.766:7335): avc: denied { read } for pid=44966 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8066): avc: denied { open } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7461): avc: denied { read } for pid=34150 comm="node_exporter" name="fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.058:8873): avc: denied { read } for pid=34150 comm="node_exporter" name="hwmon0" dev="sysfs" ino=36920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7365): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/7" dev="proc" ino=153420 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051591.366:7126): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.438:7021): avc: denied { getattr } for pid=40781 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { getattr } for pid=25523 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.071:8894): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.059:7463): avc: denied { read } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.693:7712): avc: denied { read } for pid=76281 comm="msgr-worker-2" path="pipe:[273604]" dev="pipefs" ino=273604 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7747): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7052): avc: denied { search } for pid=34150 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616051730.465:7840): avc: denied { getattr } for pid=42730 comm="prometheus" laddr=172.21.15.38 lport=44082 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051642.798:7363): avc: denied { search } for pid=25150 comm="safe_timer" name="/" dev="overlay" ino=790638 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.366:6574): avc: denied { signal } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.394:7289): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051593.059:7139): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.439:7805): avc: denied { read open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.059:8686): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=161740 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051863.060:8472): avc: denied { read } for pid=34150 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.060:8698): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051803.058:8210): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.059:7032): avc: denied { read } for pid=34150 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051514.056:6762): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051744.237:7874): avc: denied { read } for pid=44966 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.060:8093): avc: denied { search } for pid=34150 comm="node_exporter" name="user" dev="tmpfs" ino=13870 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051871.103:8515): avc: denied { read } for pid=41370 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.464:8189): avc: denied { search } for pid=42730 comm="prometheus" name="etc" dev="sda1" ino=1970586 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051492.940:6607): avc: denied { append } for pid=44966 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396218 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051729.074:7833): avc: denied { search } for pid=92220 comm="pgrep" name="25150" dev="proc" ino=127332 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051593.059:7144): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051643.058:7368): avc: denied { search } for pid=34150 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051710.693:7711): avc: denied { write } for pid=76281 comm="safe_timer" path="pipe:[273604]" dev="pipefs" ino=273604 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051640.465:7360): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7518): avc: denied { open } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051493.061:6631): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7777): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051571.439:7023): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574964 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051941.712:8836): avc: denied { open } for pid=44966 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.329:8151): avc: denied { write } for pid=56187 comm="tp_osd_tp" path="pipe:[219360]" dev="pipefs" ino=219360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051927.881:8779): avc: denied { read } for pid=25150 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051709.438:7675): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.993:7997): avc: denied { sendto } for pid=25126 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051783.059:8078): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051779.716:7989): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="socket:[166319]" dev="sockfs" ino=166319 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6969): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051933.060:8810): avc: denied { read } for pid=34150 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.061:7750): avc: denied { search } for pid=34150 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051721.802:7763): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="overlay" ino=1443983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051799.882:8177): avc: denied { search } for pid=25523 comm="mgr-fin" name="etc" dev="sda1" ino=1443992 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.060:8877): avc: denied { search } for pid=34150 comm="node_exporter" name="net" dev="proc" ino=156443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051490.438:6558): avc: denied { read } for pid=40781 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1574969 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.061:7475): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051853.058:8383): avc: denied { search } for pid=34150 comm="node_exporter" name="/" dev="overlay" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c65,c509 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051637.437:7294): avc: denied { read } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051494.380:6670): avc: denied { write } for pid=50713 comm="msgr-worker-0" laddr=172.21.15.38 lport=6822 faddr=172.21.15.175 fport=34958 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051930.465:8782): avc: denied { search } for pid=42730 comm="prometheus" name="/" dev="overlay" ino=1970479 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6720): avc: denied { open } for pid=34150 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051520.763:6791): avc: denied { search } for pid=25523 comm="safe_timer" name="libpod-c85e7388139cde13396994da6ee9d29bf47c41b4da629ccf04835de0ad787d55.scope" dev="cgroup" ino=5539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051570.524:7012): avc: denied { search } for pid=56187 comm="safe_timer" name="/" dev="overlay" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c367,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051783.059:8077): avc: denied { search } for pid=34150 comm="node_exporter" name="1" dev="proc" ino=157331 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051943.437:8895): avc: denied { search } for pid=40781 comm="grafana-server" name="etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051730.465:7841): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[331060]" dev="sockfs" ino=331060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051723.060:7776): avc: denied { search } for pid=34150 comm="node_exporter" name="kernel" dev="proc" ino=166165 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051566.428:6927): avc: denied { write } for pid=77272 comm="msgr-worker-2" laddr=172.21.15.38 lport=48452 faddr=172.21.15.38 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051933.063:8820): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7518): avc: denied { read } for pid=25523 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051802.833:8199): avc: denied { search } for pid=25150 comm="safe_timer" name="var" dev="sda1" ino=1183149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c689,c772 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051595.565:7157): avc: denied { open } for pid=42730 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051782.830:8067): avc: denied { getattr } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051793.693:8129): avc: denied { remove_name } for pid=40781 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051503.060:6690): avc: denied { read } for pid=34150 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051866.010:8477): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051870.282:8488): avc: denied { search } for pid=56187 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970683 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051793.693:8129): avc: denied { unlink } for pid=40781 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051584.867:7101): avc: denied { getattr } for pid=25523 comm="mgr-fin" name="UTC" dev="sda1" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051637.035:7281): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051930.466:8788): avc: denied { write } for pid=42730 comm="prometheus" path="socket:[364708]" dev="sockfs" ino=364708 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051494.380:6669): avc: denied { read } for pid=41370 comm="msgr-worker-1" path="socket:[224121]" dev="sockfs" ino=224121 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051730.466:7843): avc: denied { append } for pid=42730 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c108,c190 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051713.060:7744): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=164403 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051727.839:7825): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051781.439:8042): avc: denied { open } for pid=40781 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574970 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051943.059:8876): avc: denied { search } for pid=34150 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.061:7516): avc: denied { read } for pid=34150 comm="node_exporter" name="file-nr" dev="proc" ino=161750 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051491.754:6578): avc: denied { write } for pid=25126 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051707.480:7631): avc: denied { read } for pid=25150 comm="msgr-worker-2" path="pipe:[122661]" dev="pipefs" ino=122661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051870.639:8507): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8180): avc: denied { search } for pid=25126 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051640.437:7347): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051860.464:8460): avc: denied { create } for pid=42730 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051707.741:7647): avc: denied { read } for pid=25523 comm="safe_timer" name="os-release" dev="overlay" ino=394712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c482,c763 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051573.060:7048): avc: denied { getattr } for pid=34150 comm="node_exporter" name="/" dev="tmpfs" ino=14377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051922.951:8675): avc: denied { search } for pid=25523 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051923.889:8713): avc: denied { use } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051744.510:7875): avc: denied { lock } for pid=40781 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1970623 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051592.767:7127): avc: denied { add_name } for pid=25150 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051798.329:8152): avc: denied { read } for pid=56187 comm="msgr-worker-1" path="pipe:[219360]" dev="pipefs" ino=219360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051800.000:8179): avc: denied { read } for pid=25126 comm="conmon" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051636.204:7264): avc: denied { append } for pid=50713 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396222 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051872.022:8524): avc: denied { write } for pid=25150 comm="fn_monstore" path="pipe:[115679]" dev="pipefs" ino=115679 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051663.060:7474): avc: denied { read } for pid=34150 comm="node_exporter" name="mounts" dev="proc" ino=165204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051636.268:7271): avc: denied { search } for pid=41370 comm="safe_timer" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051726.479:7785): avc: denied { write } for pid=25150 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi038/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051663.060:7470): avc: denied { read } for pid=34150 comm="node_exporter" name="stats" dev="sysfs" ino=50085 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051513.059:6729): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051568.438:6966): avc: denied { getattr } for pid=40781 comm="grafana-server" path="/etc" dev="sda1" ino=1968488 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c486,c875 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051863.060:8474): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051639.406:7342): avc: denied { getattr } for pid=25523 comm="safe_timer" name="os-release" dev="sda1" ino=396122 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616051733.059:7858): avc: denied { getattr } for pid=34150 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051673.567:7519): avc: denied { getattr } for pid=25523 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5546 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616051712.594:7724): avc: denied { search } for pid=41370 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970626 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c358,c658 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"'] |
||||||||||||||
| pass | 5975104 |
|
2021-03-17 23:50:45 | 2021-03-18 06:48:56 | 2021-03-18 07:11:16 | 0:22:20 | 0:14:51 | 0:07:29 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8} thrashers/mapgap thrashosds-health workloads/redirect} | 2 |
| pass | 5975106 |
|
2021-03-17 23:50:46 | 2021-03-18 06:49:16 | 2021-03-18 07:15:10 | 0:25:54 | 0:15:53 | 0:10:01 | smithi | master | ubuntu | 18.04 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-hybrid supported-random-distro$/{ubuntu_latest} tasks/progress} | 2 |
| pass | 5975108 |
|
2021-03-17 23:50:47 | 2021-03-18 06:49:27 | 2021-03-18 07:20:12 | 0:30:45 | 0:18:56 | 0:11:49 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/random-eio mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{ubuntu_latest}} | 2 |
| pass | 5975110 |
|
2021-03-17 23:50:48 | 2021-03-18 06:50:27 | 2021-03-18 07:28:01 | 0:37:34 | 0:30:07 | 0:07:27 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/few objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=jerasure-k=2-m=1} | 2 |
| pass | 5975112 |
|
2021-03-17 23:50:49 | 2021-03-18 06:50:57 | 2021-03-18 07:21:51 | 0:30:54 | 0:22:15 | 0:08:39 | smithi | master | centos | 8.3 | rados/cephadm/upgrade/{1-start-distro/1-start-centos_8.3-octopus 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/classic} | 2 |
| pass | 5975114 |
|
2021-03-17 23:50:50 | 2021-03-18 06:50:58 | 2021-03-18 07:08:05 | 0:17:07 | 0:08:23 | 0:08:44 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/cache-fs-trunc mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975116 |
|
2021-03-17 23:50:51 | 2021-03-18 06:50:58 | 2021-03-18 07:16:23 | 0:25:25 | 0:16:39 | 0:08:46 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/connectivity objectstore/bluestore-bitmap openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/cosbench_64K_read_write} | 1 |
| pass | 5975118 |
|
2021-03-17 23:50:52 | 2021-03-18 06:50:58 | 2021-03-18 07:13:57 | 0:22:59 | 0:14:30 | 0:08:29 | smithi | master | centos | 8.2 | rados/cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/connectivity task/test_adoption} | 1 |
| pass | 5975120 |
|
2021-03-17 23:50:53 | 2021-03-18 06:51:09 | 2021-03-18 07:40:30 | 0:49:21 | 0:39:03 | 0:10:18 | smithi | master | ubuntu | 18.04 | rados/standalone/{mon_election/connectivity supported-random-distro$/{ubuntu_latest} workloads/erasure-code} | 1 |
| pass | 5975122 |
|
2021-03-17 23:50:54 | 2021-03-18 06:51:09 | 2021-03-18 07:14:18 | 0:23:09 | 0:13:34 | 0:09:35 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/rebuild-mondb mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975124 |
|
2021-03-17 23:50:55 | 2021-03-18 06:51:09 | 2021-03-18 07:52:58 | 1:01:49 | 0:51:41 | 0:10:08 | smithi | master | centos | 8.2 | rados/cephadm/thrash/{0-distro/centos_8.2_kubic_stable 1-start 2-thrash 3-tasks/small-objects fixed-2 msgr/async root} | 2 |
| pass | 5975126 |
|
2021-03-17 23:50:56 | 2021-03-18 06:51:49 | 2021-03-18 07:20:11 | 0:28:22 | 0:16:39 | 0:11:43 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/redirect_promote_tests} | 2 |
| pass | 5975128 |
|
2021-03-17 23:50:57 | 2021-03-18 06:52:10 | 2021-03-18 07:17:34 | 0:25:24 | 0:18:03 | 0:07:21 | smithi | master | rhel | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8} tasks/rados_stress_watch} | 2 |
| pass | 5975130 |
|
2021-03-17 23:50:58 | 2021-03-18 06:52:30 | 2021-03-18 07:10:00 | 0:17:30 | 0:08:12 | 0:09:18 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/ceph-kvstore-tool mon_election/connectivity rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975132 |
|
2021-03-17 23:50:59 | 2021-03-18 06:52:51 | 2021-03-18 07:40:59 | 0:48:08 | 0:41:15 | 0:06:53 | smithi | master | rhel | 8.3 | rados/cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975134 |
|
2021-03-18 06:53:11 | 2021-03-18 06:53:11 | 2021-03-18 07:11:24 | 0:18:13 | 0:07:06 | 0:11:07 | smithi | master | centos | 8.3 | rados/multimon/{clusters/3 mon_election/classic msgr-failures/few msgr/async-v1only no_pools objectstore/bluestore-comp-lz4 rados supported-random-distro$/{centos_8} tasks/mon_clock_no_skews} | 2 |
| pass | 5975136 |
|
2021-03-17 23:51:00 | 2021-03-18 07:04:03 | 2021-03-18 07:37:33 | 0:33:30 | 0:23:53 | 0:09:37 | smithi | master | ubuntu | 20.04 | rados/cephadm/with-work/{0-distro/ubuntu_20.04 fixed-2 mode/root mon_election/connectivity msgr/async-v2only start tasks/rados_python} | 2 |
| pass | 5975138 |
|
2021-03-17 23:51:01 | 2021-03-18 07:04:13 | 2021-03-18 08:11:55 | 1:07:42 | 0:57:59 | 0:09:43 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/recovery-preemption mon_election/classic msgr-failures/none msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975140 |
|
2021-03-17 23:51:02 | 2021-03-18 07:04:14 | 2021-03-18 07:41:49 | 0:37:35 | 0:30:53 | 0:06:42 | smithi | master | rhel | 8.3 | rados/monthrash/{ceph clusters/3-mons mon_election/classic msgr-failures/mon-delay msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8} thrashers/many workloads/rados_mon_workunits} | 2 |
| pass | 5975142 |
|
2021-03-17 23:51:03 | 2021-03-18 07:04:34 | 2021-03-18 07:25:58 | 0:21:24 | 0:11:48 | 0:09:36 | smithi | master | centos | 8.3 | rados/objectstore/{backends/ceph_objectstore_tool supported-random-distro$/{centos_8}} | 1 |
| pass | 5975144 |
|
2021-03-17 23:51:04 | 2021-03-18 07:04:54 | 2021-03-18 07:26:27 | 0:21:33 | 0:13:34 | 0:07:59 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/few objectstore/bluestore-bitmap rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} | 3 |
| pass | 5975146 |
|
2021-03-17 23:51:05 | 2021-03-18 07:05:05 | 2021-03-18 07:40:30 | 0:35:25 | 0:26:19 | 0:09:06 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-bitmap rados recovery-overrides/{more-async-recovery} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5975148 |
|
2021-03-17 23:51:06 | 2021-03-18 07:05:45 | 2021-03-18 07:29:36 | 0:23:51 | 0:13:54 | 0:09:57 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-comp-zlib rados recovery-overrides/{more-active-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975150 |
|
2021-03-17 23:51:07 | 2021-03-18 07:07:36 | 2021-03-18 08:17:10 | 1:09:34 | 0:56:46 | 0:12:48 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/luminous-v1only backoff/peering_and_degraded ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/osd-delay rados thrashers/none thrashosds-health workloads/radosbench} | 3 |
| pass | 5975152 |
|
2021-03-17 23:51:08 | 2021-03-18 07:07:36 | 2021-03-18 08:04:52 | 0:57:16 | 0:48:05 | 0:09:11 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/bluestore-bitmap rados tasks/rados_api_tests validater/valgrind} | 2 |
| pass | 5975154 |
|
2021-03-17 23:51:09 | 2021-03-18 07:07:56 | 2021-03-18 07:33:35 | 0:25:39 | 0:14:33 | 0:11:06 | smithi | master | ubuntu | 18.04 | rados/cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/classic start} | 2 |
| pass | 5975156 |
|
2021-03-17 23:51:10 | 2021-03-18 07:08:07 | 2021-03-18 07:24:18 | 0:16:11 | 0:06:43 | 0:09:28 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/ceph-post-file mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975158 |
|
2021-03-17 23:51:11 | 2021-03-18 07:08:57 | 2021-03-18 07:30:21 | 0:21:24 | 0:10:37 | 0:10:47 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-active-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-comp-snappy rados supported-random-distro$/{ubuntu_latest} thrashers/none thrashosds-health workloads/redirect_set_object} | 2 |
| pass | 5975160 |
|
2021-03-17 23:51:12 | 2021-03-18 07:08:57 | 2021-03-18 07:38:31 | 0:29:34 | 0:20:54 | 0:08:40 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/classic objectstore/bluestore-comp openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/cosbench_64K_write} | 1 |
| fail | 5975162 |
|
2021-03-17 23:51:13 | 2021-03-18 07:09:08 | 2021-03-18 08:45:21 | 1:36:13 | 1:27:46 | 0:08:27 | smithi | master | rhel | 8.3 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/rhel_8.3_kubic_stable} | 2 |
Failure Reason:
SELinux denials found on ubuntu@smithi106.front.sepia.ceph.com: ['type=AVC msg=audit(1616052880.643:8174): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.607:8439): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053039.476:8919): avc: denied { read } for pid=57335 comm="msgr-worker-2" path="pipe:[226360]" dev="pipefs" ino=226360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.682:8979): avc: denied { write } for pid=26250 comm="msgr-worker-2" laddr=172.21.15.106 lport=3300 faddr=172.21.15.193 fport=56686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.634:8014): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.321:7782): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8114): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6744): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.620:7591): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.970:9382): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.620:7589): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053039.872:8931): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.665:8911): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.607:7821): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7653): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8193): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052781.235:7634): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.366:6737): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.609:9050): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.608:7738): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9186): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8114): avc: denied { read } for pid=35264 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.602:7278): avc: denied { create } for pid=26250 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.142:8422): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.635:8091): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7157): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.873:8521): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.608:7740): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.605:8816): avc: denied { read } for pid=35264 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.970:7269): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8956): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053110.686:9301): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052632.277:6841): avc: denied { open } for pid=51861 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052620.402:6818): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052711.928:7243): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.970:7578): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.556:8989): avc: denied { read } for pid=26625 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.872:9441): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[401106]" dev="sockfs" ino=401106 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.026:8348): avc: denied { open } for pid=42520 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.605:8189): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8777): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053045.682:8980): avc: denied { write } for pid=26250 comm="ms_dispatch" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.179:9168): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.607:7232): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.871:7345): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8774): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052949.872:8477): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=53850 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.632:8338): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053122.637:9340): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052880.643:8174): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.872:8160): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.589:6928): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.970:8456): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8592): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8993): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.606:6745): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.622:7741): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.647:8358): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8994): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052939.026:8348): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9415): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.607:9042): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.473:6843): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052613.664:6727): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.606:8114): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.608:9194): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.971:9398): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.608:7736): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.647:8358): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.969:9239): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.595:7704): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.605:8199): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.682:9376): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.608:9199): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.117:9258): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[169533]" dev="sockfs" ino=169533 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.107:7273): avc: denied { read } for pid=51861 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.643:8172): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052974.607:8620): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616053054.606:9025): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.970:9242): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8777): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7987): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.670:8759): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052729.872:7394): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052785.247:7677): avc: denied { search } for pid=26625 comm="safe_timer" name="diff" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052789.260:7684): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.606:6872): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.609:7126): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.682:9375): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053030.651:8887): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.620:7301): avc: denied { unlink } for pid=26250 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8191): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.622:7741): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8431): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.043:7775): avc: denied { read } for pid=51861 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.333:8768): avc: denied { read } for pid=42520 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7092): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7722): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.635:8092): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8813): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052632.969:6852): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8339): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.606:8574): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9004): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.632:7772): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052979.871:8627): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.637:8147): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053022.613:8771): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.683:9430): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6850): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053123.110:9344): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.678:9282): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.228:9347): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7134): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7835): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9306): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.970:8346): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.608:7373): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053039.476:8921): avc: denied { write } for pid=57335 comm="msgr-worker-0" laddr=172.21.15.106 lport=44256 faddr=172.21.15.106 fport=6806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8577): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.928:7336): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7157): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.104:7270): avc: denied { open } for pid=43954 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.872:7395): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=35109 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8595): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.872:8884): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=35471 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.873:9389): avc: denied { append } for pid=57335 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7093): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052632.962:6845): avc: denied { read } for pid=42520 comm="msgr-worker-1" path="socket:[199143]" dev="sockfs" ino=199143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.799:6931): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.296:7702): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052780.349:7627): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053125.110:9386): avc: denied { write } for pid=26625 comm="safe_timer" path="pipe:[149545]" dev="pipefs" ino=149545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.606:7359): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052873.253:8103): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.026:8347): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.585:6738): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8815): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.871:8369): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=42188 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.607:7117): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.259:8560): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/lib/python3.6/site-packages/remoto/process.py" dev="overlay" ino=918519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7371): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.307:8566): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.608:8446): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052949.872:8476): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8195): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.608:8122): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8148): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.141:7761): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8815): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052865.041:8093): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.871:7346): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6846): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.606:9030): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7221): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6948): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052865.041:8094): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052800.969:7810): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.606:7649): avc: denied { read } for pid=35264 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7656): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8772): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.548:7686): avc: denied { search } for pid=92153 comm="pgrep" name="26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053049.872:9019): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.725:8152): avc: denied { read } for pid=26625 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7363): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8150): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8571): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052697.130:7171): avc: denied { open } for pid=51861 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.584:6655): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.584:6657): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.872:8020): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=44820 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.969:7351): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.116:9163): avc: denied { append } for pid=26250 comm="log" path="/var/log/ceph/ceph-mon.smithi106.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052635.593:6886): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.609:8590): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.663:8836): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.606:9448): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7834): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.553:8754): avc: denied { getattr } for pid=26625 comm="mgr-fin" name="UTC" dev="sda1" ino=1181444 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.609:9467): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.074:8547): avc: denied { read } for pid=46133 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.609:9366): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7225): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9175): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.682:9374): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.608:8588): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052774.827:7530): avc: denied { read } for pid=26625 comm="msgr-worker-0" path="socket:[277975]" dev="sockfs" ino=277975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052710.502:7240): avc: denied { append } for pid=57335 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053026.694:8865): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9035): avc: denied { read } for pid=35264 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9462): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052942.118:8398): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052943.309:8400): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9181): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052941.306:8394): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053130.187:9442): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.606:7820): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.606:8490): avc: denied { read } for pid=35264 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.168:8628): avc: denied { read } for pid=57335 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7109): avc: denied { read } for pid=35264 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.726:7306): avc: denied { append } for pid=46133 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8344): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052957.563:8506): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.026:8347): avc: denied { open } for pid=42520 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.486:6901): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053123.663:9346): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8537): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052975.564:8625): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052780.673:7630): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7551): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053039.476:8918): avc: denied { write } for pid=57335 comm="osd_srv_heartbt" path="pipe:[226360]" dev="pipefs" ino=226360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053039.666:8926): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.725:8153): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7540): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052789.548:7686): avc: denied { read } for pid=92153 comm="pgrep" name="status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053127.970:9396): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.607:8901): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.611:8213): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.606:8820): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8809): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9464): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.622:7792): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052638.971:6926): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.596:7784): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.602:7341): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.042:7774): avc: denied { open } for pid=51861 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9002): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.073:8555): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.607:7230): avc: denied { read } for pid=35264 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7727): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.608:9046): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8438): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.896:7088): avc: denied { open } for pid=46133 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052698.830:7196): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.971:7750): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.584:6659): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.609:6962): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.607:9356): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053145.467:9474): avc: denied { search } for pid=51861 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.969:7352): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.871:9287): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.969:7353): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053111.047:9304): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8191): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052782.970:7640): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.192:7621): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.190:7947): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.872:6934): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.610:6884): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052789.621:7690): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.678:9282): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7370): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.673:8937): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.606:7106): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052783.133:7643): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919874 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.970:8914): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.653:8598): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.607:7731): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.146:8550): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9352): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052957.111:8498): avc: denied { read } for pid=46133 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.608:8492): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.314:6896): avc: denied { open } for pid=51861 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.698:7805): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.725:8153): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8539): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.598:7103): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9323): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.608:8970): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8427): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.872:7595): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053111.035:9302): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.374:7255): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.177:6895): avc: denied { append } for pid=42520 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.871:7350): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[323595]" dev="sockfs" ino=323595 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8539): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.609:7827): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052940.117:8392): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7720): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052631.663:6839): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052880.699:8180): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.043:8127): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.609:9364): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8351): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.307:8565): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.871:9290): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=56848 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053108.640:9255): avc: denied { read } for pid=26250 comm="fn_monstore" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000023.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052635.593:6887): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052857.970:7996): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052638.970:6925): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052958.227:8508): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.607:8491): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.607:8969): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.611:7838): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.690:9420): avc: denied { open } for pid=51861 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052958.227:8508): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.606:8426): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8591): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.698:7806): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.606:7106): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.405:8749): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[277453]" dev="sockfs" ino=277453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8825): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8573): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.548:7685): avc: denied { getattr } for pid=92153 comm="pgrep" path="/proc/26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052610.031:6685): avc: denied { open } for pid=51861 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7748): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052962.970:8534): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053121.970:9332): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.665:8879): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052869.677:8096): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8151): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.253:8334): avc: denied { write } for pid=26625 comm="msgr-worker-1" laddr=172.21.15.106 lport=52372 faddr=172.21.15.106 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.611:7239): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052859.080:8009): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.607:8905): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.517:8800): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919874 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.606:6746): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.608:7736): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.608:8907): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9319): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.609:9365): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.606:8485): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9453): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.604:8010): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9458): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.799:8362): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8075): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9307): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.607:8902): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.607:9192): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052637.662:6912): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052717.924:7318): avc: denied { write } for pid=26250 comm="safe_timer" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.609:7378): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.699:7631): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.609:7129): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8082): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.609:9468): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.969:7354): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8444): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9038): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.692:8840): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/share/ceph/mgr/cephadm/serve.py" dev="overlay" ino=1051020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.678:9284): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8436): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.872:8519): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[369379]" dev="sockfs" ino=369379 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.135:9426): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.536:8978): avc: denied { read } for pid=26625 comm="msgr-worker-0" path="socket:[231325]" dev="sockfs" ino=231325 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.473:6858): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.872:7203): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.872:8019): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052957.316:8499): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052613.662:6725): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9311): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.690:9420): avc: denied { read } for pid=51861 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9035): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.668:9013): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052957.316:8501): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052956.097:8494): avc: denied { write } for pid=26250 comm="safe_timer" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.670:8759): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052971.969:8615): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052857.970:7993): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052711.955:7246): avc: denied { write } for pid=42520 comm="msgr-worker-2" laddr=172.21.15.106 lport=43292 faddr=172.21.15.106 fport=6816 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052778.635:7588): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.609:6765): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9006): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052717.924:7319): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6678): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[294198]" dev="sockfs" ino=294198 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.970:7417): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.608:6876): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8573): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8438): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052881.971:8185): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052982.358:8642): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.309:8423): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.601:7277): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8819): avc: denied { read } for pid=35264 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.853:7086): avc: denied { open } for pid=42520 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7650): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.608:6762): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8574): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.970:7997): avc: denied { search } for pid=41927 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053049.668:9015): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052637.662:6912): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052724.609:7376): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.648:8359): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.460:8143): avc: denied { write } for pid=42520 comm="msgr-worker-1" laddr=172.21.15.106 lport=6802 faddr=172.21.15.193 fport=49454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.643:8173): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.606:8821): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.658:7548): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.872:7397): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[319385]" dev="sockfs" ino=319385 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.605:6823): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8052): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8352): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053105.010:9218): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.726:9001): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052632.969:6849): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052979.654:8626): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7093): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052938.309:8336): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.556:8989): avc: denied { search } for pid=26625 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.970:9380): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.608:8587): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6747): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.970:7417): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6956): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.333:7710): avc: denied { write } for pid=26250 comm="msgr-worker-2" laddr=172.21.15.106 lport=3300 faddr=172.21.15.106 fport=52372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.871:9292): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[398963]" dev="sockfs" ino=398963 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052617.245:6801): avc: denied { read } for pid=42520 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.606:9447): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052785.336:7680): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052881.971:8185): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.607:8903): avc: denied { read } for pid=35264 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052613.664:6728): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052729.534:7385): avc: denied { getattr } for pid=88954 comm="pgrep" path="/proc/26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052793.042:7699): avc: denied { write } for pid=26250 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.605:7284): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.277:6841): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.617:7300): avc: denied { read } for pid=26250 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8991): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052962.970:8538): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9174): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8819): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.620:7672): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.699:8182): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.585:6739): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.263:8562): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7831): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.971:7999): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053030.673:8888): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.308:7777): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052945.312:8459): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.607:8583): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8148): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6949): avc: denied { read } for pid=35264 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.776:8913): avc: denied { open } for pid=57335 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.970:9296): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7551): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.606:8063): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053146.693:9483): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052729.534:7388): avc: denied { read } for pid=88954 comm="pgrep" name="status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.553:8754): avc: denied { search } for pid=26625 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052637.662:6913): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052963.070:8545): avc: denied { write } for pid=78441 comm="msgr-worker-2" laddr=172.21.15.106 lport=60440 faddr=172.21.15.193 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9043): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.308:7778): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.607:7234): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052949.872:8472): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053108.634:9250): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.585:6739): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9216): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6742): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.043:8127): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.607:6759): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7552): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.606:8112): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.531:7153): avc: denied { write } for pid=26625 comm="msgr-worker-1" laddr=172.21.15.106 lport=52372 faddr=172.21.15.106 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.608:7671): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052711.954:7245): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052630.698:6836): avc: denied { search } for pid=41927 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.606:6941): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.607:7730): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053028.970:8870): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8577): avc: denied { read } for pid=35264 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.608:6878): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053026.626:8864): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.872:7597): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8537): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.607:8898): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.609:7126): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.830:7313): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7540): avc: denied { read } for pid=26625 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.307:8566): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.607:8906): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616053046.985:9009): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6774): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.605:8194): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9454): avc: denied { read } for pid=35264 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.830:7312): avc: denied { search } for pid=46133 comm="safe_timer" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7542): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.099:9403): avc: denied { write } for pid=78441 comm="msgr-worker-0" laddr=172.21.15.106 lport=46016 faddr=172.21.15.193 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.607:9360): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.970:8455): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.584:6656): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.609:7125): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.701:8129): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.534:7386): avc: denied { read } for pid=88954 comm="pgrep" name="status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.658:6666): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053111.047:9304): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.698:8635): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052724.607:7364): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052969.594:8603): avc: denied { read } for pid=99032 comm="pgrep" name="status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.609:8973): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052876.043:8135): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.970:7993): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052699.872:7207): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[315673]" dev="sockfs" ino=315673 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.699:8941): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6864): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.971:8541): avc: denied { read } for pid=41927 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.634:9205): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.606:7289): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.670:8758): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.872:8161): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052654.104:6966): avc: denied { read } for pid=43954 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.683:9430): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053048.624:9012): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6947): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.969:7264): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.608:9195): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.607:6756): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.609:6958): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052637.662:6913): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.663:7082): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[190176]" dev="sockfs" ino=190176 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9462): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7744): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.626:8974): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.969:9295): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052962.970:8534): avc: denied { search } for pid=41927 comm="grafana-server" name="dashboards" dev="sda1" ino=1444451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052734.608:7414): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.626:8994): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053040.701:8944): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.609:6767): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052962.971:8541): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8434): avc: denied { read } for pid=35264 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.609:6962): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.074:8547): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053039.517:8924): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.971:9398): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7722): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.873:7208): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.607:6757): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9393): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.872:7601): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[330179]" dev="sockfs" ino=330179 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.872:8882): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.970:7993): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.670:8759): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.179:9169): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8115): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.896:7088): avc: denied { read } for pid=46133 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7228): avc: denied { read } for pid=35264 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.119:6686): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.089:7760): avc: denied { open } for pid=51861 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8055): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052958.614:8510): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8594): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8960): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052630.449:6830): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.853:7086): avc: denied { read } for pid=42520 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.971:7999): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8350): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.607:9455): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053145.467:9475): avc: denied { open } for pid=51861 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.969:7808): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.460:8139): avc: denied { read } for pid=42520 comm="msgr-worker-1" path="socket:[277001]" dev="sockfs" ino=277001 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7729): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052619.585:6810): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.607:8442): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.602:7339): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.970:8454): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.607:8081): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.607:7230): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6752): avc: denied { read } for pid=35264 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6865): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8823): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053122.637:9340): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.606:7645): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.074:8548): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052974.653:8623): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.737:8156): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.608:8830): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.979:6683): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.510:8753): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.606:8489): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052894.104:8215): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.979:6684): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.970:7579): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.979:7399): avc: denied { search } for pid=41927 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.607:8900): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8077): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.587:6860): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.349:7627): avc: denied { read } for pid=42520 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.609:6964): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052940.117:8393): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8442): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.607:9192): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.042:7774): avc: denied { read } for pid=51861 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8592): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.269:7958): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9412): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.622:7792): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.970:9378): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052633.666:6856): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.927:7090): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.584:6656): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6776): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.872:8880): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.606:8895): avc: denied { read } for pid=35264 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052617.013:6799): avc: denied { read } for pid=75908 comm="msgr-worker-0" path="pipe:[275932]" dev="pipefs" ino=275932 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052637.662:6913): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.602:7279): avc: denied { getattr } for pid=26250 comm="rstore_compact" path="/sys" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.596:7787): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.590:7712): avc: denied { write } for pid=26625 comm="safe_timer" path="pipe:[149544]" dev="pipefs" ino=149544 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.308:7778): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8956): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6944): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052612.342:6703): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.872:8016): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052712.472:7251): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.634:8011): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.307:8566): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052636.314:6897): avc: denied { read } for pid=51861 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053111.047:9305): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8069): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6744): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8055): avc: denied { read } for pid=41927 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.608:8085): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7718): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7108): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.969:7265): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7323): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7540): avc: denied { search } for pid=26625 comm="safe_timer" name="diff" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.104:7272): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052781.235:7634): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9173): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.609:7377): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.609:7129): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6954): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052894.104:8214): avc: denied { read } for pid=43954 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8959): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052613.718:6733): avc: denied { read } for pid=57335 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6950): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.898:7156): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052700.830:7214): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8589): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053114.606:9317): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.969:7351): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.970:9381): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053121.986:9336): avc: denied { append } for pid=57335 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7660): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052630.698:6836): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052611.661:6697): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.610:7833): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.634:9204): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.871:9291): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[404499]" dev="sockfs" ino=404499 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8075): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053027.574:8866): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.606:8428): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7228): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.642:8039): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053022.969:8772): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052942.118:8398): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052617.245:6801): avc: denied { open } for pid=42520 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.620:7593): avc: denied { append } for pid=26250 comm="log" path="/var/log/ceph/ceph-mon.smithi106.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053108.613:9249): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.613:8834): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.506:7152): avc: denied { read } for pid=26625 comm="msgr-worker-0" path="socket:[231325]" dev="sockfs" ino=231325 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.664:7707): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.608:8831): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052784.607:7659): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.070:8544): avc: denied { write } for pid=78441 comm="msgr-worker-1" laddr=172.21.15.106 lport=44074 faddr=172.21.15.106 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052730.978:7402): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8810): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.191:7951): avc: denied { write } for pid=46133 comm="msgr-worker-2" laddr=172.21.15.106 lport=41126 faddr=172.21.15.106 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8993): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.333:7711): avc: denied { read } for pid=26625 comm="msgr-worker-1" path="socket:[151621]" dev="sockfs" ino=151621 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8579): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7961): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053107.785:9247): avc: denied { open } for pid=46133 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.424:6899): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.042:7774): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9002): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8435): avc: denied { read } for pid=35264 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052701.971:7218): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8426): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7726): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052735.607:7419): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.969:9241): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.582:8990): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7366): avc: denied { read } for pid=35264 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.296:7702): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052793.296:7702): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.609:6765): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053049.668:9013): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052954.606:8488): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052881.970:8183): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052654.104:6967): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053146.693:9482): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.610:8211): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.682:7085): avc: denied { read } for pid=75440 comm="msgr-worker-0" path="pipe:[276751]" dev="pipefs" ino=276751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.428:7766): avc: denied { write } for pid=78441 comm="safe_timer" path="pipe:[281026]" dev="pipefs" ino=281026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7368): avc: denied { read } for pid=35264 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.606:6870): avc: denied { read } for pid=35264 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052697.130:7171): avc: denied { read } for pid=51861 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7092): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052860.642:8040): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.608:8086): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052624.605:6825): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8775): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.607:9190): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.607:7730): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.652:8513): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.668:8755): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052711.954:7245): avc: denied { open } for pid=42520 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.606:9446): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.690:9420): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.607:7116): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.608:7375): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052962.970:8538): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.677:9210): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.606:9032): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8071): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.607:9189): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.598:7100): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.905:9422): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8350): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.607:7655): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.177:6890): avc: denied { write } for pid=75440 comm="ceph_timer" path="pipe:[276752]" dev="pipefs" ino=276752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.871:8364): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.969:7266): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7370): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.613:7298): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7667): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.872:7598): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6665): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.926:7089): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.714:8999): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.634:9202): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053110.685:9299): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052860.970:8053): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052861.267:8056): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053042.626:8947): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.607:8899): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052618.390:6809): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.123:9424): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.970:8778): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9351): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.606:7110): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7833): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.606:9029): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6745): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8344): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8077): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052858.633:8007): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.608:8447): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6924): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052724.606:7361): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8994): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052617.020:6800): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052859.872:8021): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[351430]" dev="sockfs" ino=351430 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8892): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.098:8549): avc: denied { write } for pid=26250 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.111:7328): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6749): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052969.594:8603): avc: denied { open } for pid=99032 comm="pgrep" path="/proc/26218/status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.602:7278): avc: denied { add_name } for pid=26250 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.610:7380): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8190): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6771): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9184): avc: denied { read } for pid=35264 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.253:8335): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[148159]" dev="sockfs" ino=148159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.971:9400): avc: denied { read } for pid=41927 comm="grafana-server" name="rbd-overview.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052800.698:7804): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8895): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.653:8598): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.903:7303): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.698:7805): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052940.105:8390): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8776): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.871:7343): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052712.903:7253): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052938.253:8333): avc: denied { read } for pid=26625 comm="msgr-worker-1" path="pipe:[149545]" dev="pipefs" ino=149545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7549): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052880.643:8173): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052718.916:7333): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.595:9172): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.553:8754): avc: denied { read } for pid=26625 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.605:6864): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.610:7238): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052803.256:7815): avc: denied { search } for pid=34448 comm="ceph-crash" name="/" dev="overlay" ino=1444300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c1016 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.606:8065): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052969.594:8602): avc: denied { getattr } for pid=99032 comm="pgrep" path="/proc/26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.726:9001): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052697.129:7170): avc: denied { search } for pid=51861 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.620:7672): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.872:8517): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.035:9256): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.610:8210): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.970:9242): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052782.195:7638): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053128.638:9415): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.609:8090): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7667): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.116:9165): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.179:9169): avc: denied { read } for pid=42520 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6672): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7727): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.610:7835): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9350): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8438): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052980.698:8636): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053029.872:8881): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052736.540:7422): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1181444 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052783.235:7644): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.308:7779): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.606:8065): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.605:7816): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.610:9471): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7323): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.596:7787): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052869.872:8097): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.179:9168): avc: denied { search } for pid=42520 comm="safe_timer" name="diff" dev="sda1" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.610:8209): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.426:8137): avc: denied { append } for pid=57335 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8592): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7367): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6675): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.872:9023): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[392535]" dev="sockfs" ino=392535 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.607:9357): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.607:8874): avc: denied { search } for pid=102277 comm="pgrep" name="26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052778.614:7587): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.872:7602): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[330179]" dev="sockfs" ino=330179 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.330:6690): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.608:6875): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6742): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.602:7338): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053111.047:9304): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.905:9422): avc: denied { read } for pid=46133 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.585:6739): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.596:7787): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.607:8069): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.971:9383): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.609:9366): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.620:7673): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.699:7632): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052712.903:7253): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.610:8208): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6666): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.477:9278): avc: denied { read } for pid=51861 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052873.701:8109): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.609:8207): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052637.662:6911): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.607:7731): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.699:8943): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.595:7689): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.606:8064): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7652): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052611.661:6697): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.653:8599): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.307:8565): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.634:9204): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053121.970:9333): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052860.970:8053): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8894): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052782.018:7635): avc: denied { write } for pid=75908 comm="safe_timer" path="pipe:[275932]" dev="pipefs" ino=275932 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052795.629:7755): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052980.874:8638): avc: denied { write } for pid=51861 comm="osd_srv_heartbt" path="pipe:[214085]" dev="pipefs" ino=214085 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.803:7309): avc: denied { read } for pid=42520 comm="msgr-worker-1" path="socket:[245970]" dev="sockfs" ino=245970 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8074): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.678:9282): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.940:7098): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.648:8361): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.610:7382): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.663:8839): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.606:6942): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.116:9257): avc: denied { write } for pid=26250 comm="msgr-worker-2" laddr=172.21.15.106 lport=3300 faddr=172.21.15.193 fport=56686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8813): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052699.931:7211): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9039): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053146.560:9481): avc: denied { search } for pid=26625 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.584:6655): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.643:8174): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.607:9359): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052609.658:6665): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.601:7275): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.606:7287): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8200): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7829): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8579): avc: denied { read } for pid=35264 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7744): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6920): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052713.930:7258): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.606:6940): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7964): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6920): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.688:8939): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052958.215:8507): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.318:6646): avc: denied { write } for pid=57335 comm="msgr-worker-1" laddr=172.21.15.106 lport=52740 faddr=172.21.15.106 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8195): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.607:9189): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.979:6681): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6677): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=39554 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.673:8935): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052619.872:6816): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[294983]" dev="sockfs" ino=294983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052865.041:8093): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.608:8450): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053040.673:8938): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.611:7837): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.177:6893): avc: denied { read } for pid=42520 comm="msgr-worker-0" path="socket:[276759]" dev="sockfs" ino=276759 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.609:6880): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052698.830:7196): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9007): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.924:7210): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.606:7648): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.548:7686): avc: denied { open } for pid=92153 comm="pgrep" path="/proc/26218/status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.626:8993): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053030.651:8887): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052697.921:7176): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.610:7830): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052635.970:6888): avc: denied { search } for pid=41927 comm="grafana-server" name="diff" dev="sda1" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.609:6963): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616053134.608:9464): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7227): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052949.872:8473): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.428:7769): avc: denied { read } for pid=26625 comm="msgr-worker-0" path="socket:[276402]" dev="sockfs" ino=276402 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.608:8085): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.663:8837): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6951): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8189): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052612.392:6722): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.971:8001): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6666): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.606:7286): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.595:7689): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.591:7962): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.872:9439): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=59597 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.607:7410): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6665): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052939.312:8353): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.663:8836): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.606:9450): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.872:7199): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.606:9028): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.307:8566): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052969.594:8605): avc: denied { search } for pid=99032 comm="pgrep" name="26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.969:7267): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053029.607:8876): avc: denied { open } for pid=102277 comm="pgrep" path="/proc/26250/status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052949.872:8478): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[368913]" dev="sockfs" ino=368913 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.760:8051): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.668:9016): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.683:9429): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052638.970:6924): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7748): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.598:7101): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052700.699:7212): avc: denied { search } for pid=41927 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052780.349:7627): avc: denied { open } for pid=42520 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.608:8123): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.853:7086): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8440): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.607:9356): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.609:9047): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616053104.607:9192): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053039.666:8926): avc: denied { search } for pid=26250 comm="safe_timer" name="diff" dev="sda1" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.626:8992): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052882.693:8188): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.606:7290): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.673:8935): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052699.872:7206): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[314264]" dev="sockfs" ino=314264 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052943.664:8404): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052712.328:7249): avc: denied { write } for pid=77444 comm="ceph_timer" path="pipe:[279673]" dev="pipefs" ino=279673 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9456): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.319:8511): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052938.969:8340): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.251:8557): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.608:8830): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7130): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7747): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052873.689:8108): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.429:7770): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.668:9014): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.606:8202): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.512:8631): avc: denied { write } for pid=26625 comm="msgr-worker-1" laddr=172.21.15.106 lport=52372 faddr=172.21.15.106 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052633.663:6854): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053123.098:9343): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9351): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.607:7657): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.608:6876): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9459): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.969:8640): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444456 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052782.970:7640): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052962.971:8541): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.970:6776): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.608:6761): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.872:7204): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.601:8769): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.634:8013): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8824): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7647): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.665:8878): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.871:7343): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.608:8088): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052943.870:8405): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.584:6655): avc: denied { search } for pid=26250 comm="safe_timer" name="diff" dev="sda1" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.607:8080): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6863): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052735.611:7420): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.607:7119): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052939.871:8365): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053145.467:9475): avc: denied { read } for pid=51861 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7370): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.608:7121): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.608:6877): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.602:9409): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.605:6823): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8339): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052786.208:7682): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.872:9024): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[383922]" dev="sockfs" ino=383922 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.613:7547): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9176): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.107:7273): avc: denied { open } for pid=51861 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053028.970:8870): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.610:9472): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.872:8158): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053022.969:8777): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052712.903:7253): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.609:6961): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7665): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052619.585:6810): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.637:8148): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.872:9017): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9318): avc: denied { read } for pid=35264 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.608:8088): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053121.986:9335): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.698:7804): avc: denied { search } for pid=41927 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052980.698:8635): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.397:9171): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.969:7810): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.106:9445): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.872:8880): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8539): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.622:7793): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8994): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9178): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052635.593:6886): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7725): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.877:8982): avc: denied { open } for pid=57335 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.494:8038): avc: denied { open } for pid=57335 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.643:8174): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052875.713:8131): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052700.830:7213): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.701:8129): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.177:7776): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.609:9048): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.606:9448): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.610:8211): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.871:8363): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.610:6883): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616053134.609:9470): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052857.971:7999): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.971:8540): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.232:9428): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9460): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.670:8757): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.132:7708): avc: denied { read } for pid=51861 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.665:8912): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9312): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9180): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9456): avc: denied { read } for pid=35264 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.609:7827): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052969.594:8603): avc: denied { search } for pid=99032 comm="pgrep" name="26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053127.970:9393): avc: denied { search } for pid=41927 comm="grafana-server" name="dashboards" dev="sda1" ino=1444451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.677:9211): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7714): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.606:9449): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7541): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.606:8486): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.607:7292): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7960): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8897): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.699:7632): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052861.517:8057): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.609:8207): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.606:8571): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7162): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.413:8934): avc: denied { read } for pid=57335 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8575): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052785.247:7678): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052945.060:8457): avc: denied { open } for pid=57335 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.104:7270): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.142:8422): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052963.074:8547): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.135:9426): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.498:6904): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.212:8798): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7666): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.969:9294): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.031:6685): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.116:9167): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[169533]" dev="sockfs" ino=169533 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053110.685:9300): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052793.296:7702): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053029.607:8874): avc: denied { open } for pid=102277 comm="pgrep" path="/proc/26218/status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053106.970:9242): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.131:7099): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.610:7383): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052969.872:8610): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=41498 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.314:6896): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052861.547:8058): avc: denied { read } for pid=26625 comm="mgr-fin" name="localtime" dev="sda1" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.584:6655): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8112): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.662:8553): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.872:7390): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.872:7202): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7651): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.970:8346): avc: denied { read } for pid=41927 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.871:7801): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[339975]" dev="sockfs" ino=339975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052712.328:7250): avc: denied { read } for pid=77444 comm="msgr-worker-1" path="pipe:[279673]" dev="pipefs" ino=279673 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.608:8447): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.135:9426): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052880.699:8182): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.670:8759): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.670:8758): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052631.663:6838): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.871:7347): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.872:7201): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7719): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.964:8533): avc: denied { append } for pid=42520 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.588:6927): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.970:8346): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.135:9426): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052943.309:8400): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.970:6775): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.624:8877): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.609:7294): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.587:6862): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053028.970:8872): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052781.235:7634): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053146.560:9481): avc: denied { search } for pid=26625 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.606:7819): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.607:9354): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.042:7774): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.872:9440): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[405216]" dev="sockfs" ino=405216 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9316): avc: denied { read } for pid=35264 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8192): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7745): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.607:8968): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.598:7101): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.670:8758): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.605:7818): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8195): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7550): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052734.607:7410): avc: denied { read } for pid=35264 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.596:7784): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.510:8753): avc: denied { open } for pid=46133 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.192:7622): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052724.610:7379): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8344): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.376:9275): avc: denied { write } for pid=57335 comm="safe_timer" path="pipe:[226359]" dev="pipefs" ino=226359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7834): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.608:8087): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.970:9007): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.830:7312): avc: denied { read } for pid=46133 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.872:8520): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[361421]" dev="sockfs" ino=361421 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.606:9027): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7551): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.970:9382): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.507:6651): avc: denied { getattr } for pid=83253 comm="pgrep" path="/proc/26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052729.534:7388): avc: denied { open } for pid=88954 comm="pgrep" path="/proc/26250/status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053125.110:9385): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.607:9036): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7223): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8809): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6666): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7717): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.553:8754): avc: denied { read } for pid=26625 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.610:7383): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7113): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8078): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053146.560:9481): avc: denied { read } for pid=26625 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9415): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.927:7092): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052939.871:8367): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9309): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.605:8815): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.930:7257): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.971:7580): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9045): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.609:9048): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.971:9400): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.606:7112): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8811): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052618.378:6808): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.620:7594): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.162:6688): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6923): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.609:7295): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052781.235:7634): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052857.077:7988): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.608:7670): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052949.872:8475): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.556:8989): avc: denied { search } for pid=26625 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052800.969:7808): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8826): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.486:6901): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053031.971:8891): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.074:8547): avc: denied { open } for pid=46133 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.607:9358): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.477:9278): avc: denied { open } for pid=51861 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9002): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7114): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.699:8049): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052793.595:7703): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.405:8747): avc: denied { read } for pid=78441 comm="msgr-worker-1" path="pipe:[281027]" dev="pipefs" ino=281027 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.969:9237): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.970:7356): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052698.818:7195): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.608:8449): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052884.610:8210): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8342): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8952): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.613:7771): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053042.701:8948): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6750): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052974.653:8623): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.099:9406): avc: denied { read } for pid=42520 comm="msgr-worker-1" path="socket:[281030]" dev="sockfs" ino=281030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7961): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.678:9283): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.608:8829): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.612:7297): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8892): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7224): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.663:8837): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8957): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.714:9000): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.634:8012): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8596): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052614.609:6769): avc: denied { write } for pid=26250 comm="msgr-worker-2" laddr=172.21.15.106 lport=3300 faddr=172.21.15.193 fport=56686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052940.105:8390): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.725:8152): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.607:8876): avc: denied { read } for pid=102277 comm="pgrep" name="status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.608:8447): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.804:7310): avc: denied { write } for pid=42520 comm="msgr-worker-1" laddr=172.21.15.106 lport=6808 faddr=172.21.15.193 fport=34862 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.043:7775): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.177:6894): avc: denied { append } for pid=57335 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9460): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053049.872:9018): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.190:7947): avc: denied { open } for pid=46133 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.872:7199): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052789.621:7690): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053022.969:8776): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.553:8754): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181444 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.607:6828): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052613.664:6727): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052639.588:6927): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.607:9040): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.596:7787): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.927:7093): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052636.486:6900): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052612.661:6724): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.610:6882): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.553:8754): avc: denied { search } for pid=26625 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.649:8451): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.605:7817): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.565:8804): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.607:9037): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8955): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8433): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6925): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.607:7119): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052729.858:7389): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053022.969:8772): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.805:7131): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.263:8562): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.872:7391): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.584:6656): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7663): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.602:7281): avc: denied { read } for pid=26250 comm="rstore_compact" name="253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052873.701:8110): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.043:8126): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.607:8436): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053026.626:8864): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8808): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.607:7735): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.607:7408): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.607:6758): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7544): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.565:8805): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052859.080:8008): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053106.969:9241): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.587:6861): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.251:8558): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.872:9436): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.606:8487): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8432): avc: denied { read } for pid=35264 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.584:6658): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8353): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053049.668:9014): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052786.208:7683): avc: denied { open } for pid=57335 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052731.970:7404): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.607:7659): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6771): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.930:7259): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.620:7589): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052945.060:8457): avc: denied { read } for pid=57335 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.313:8168): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8434): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052947.970:8467): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052792.721:7697): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.970:7356): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7104): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8343): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.607:8904): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7157): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.606:6749): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6671): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.507:6654): avc: denied { search } for pid=83253 comm="pgrep" name="26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.620:7590): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.315:6842): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.660:8527): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9327): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616053134.607:9457): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.607:7116): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6954): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7658): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.269:7959): avc: denied { open } for pid=42520 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.608:8833): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.620:7672): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.971:9400): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.606:6869): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9463): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8194): avc: denied { read } for pid=35264 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052947.316:8465): avc: denied { write } for pid=26250 comm="msgr-worker-2" laddr=172.21.15.106 lport=3300 faddr=172.21.15.106 fport=52372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.607:8903): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.872:9433): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052724.607:7363): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.608:7739): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052610.330:6691): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.970:7993): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052859.872:8022): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[344710]" dev="sockfs" ino=344710 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8443): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9348): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.605:6821): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.871:8371): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[360179]" dev="sockfs" ino=360179 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.556:8989): avc: denied { getattr } for pid=26625 comm="mgr-fin" name="UTC" dev="sda1" ino=1181444 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052954.105:8482): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.634:9205): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053114.606:9322): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7552): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053105.010:9215): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.607:7411): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6754): avc: denied { read } for pid=35264 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052797.594:7757): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052957.316:8501): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053049.872:9020): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8535): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.970:7603): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.677:9213): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053026.614:8862): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.620:7589): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.602:7338): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8994): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053128.905:9422): avc: denied { open } for pid=46133 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9463): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052619.872:6811): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.970:9380): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.971:9008): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.670:8759): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052880.643:8173): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052793.284:7701): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.307:8565): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.318:6645): avc: denied { read } for pid=57335 comm="msgr-worker-1" path="pipe:[226359]" dev="pipefs" ino=226359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9395): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053123.110:9344): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.607:8582): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052856.951:7984): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8439): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052777.841:7583): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7648): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052945.885:8461): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8200): avc: denied { read } for pid=35264 comm="node_exporter" name="eno1" dev="sysfs" ino=34826 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.606:7360): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7552): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.132:7708): avc: denied { open } for pid=51861 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.606:6942): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.622:7330): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.609:9366): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.725:8153): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9461): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.649:8451): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7987): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.607:7119): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052959.872:8518): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=55688 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6920): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7222): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.277:6841): avc: denied { read } for pid=51861 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052774.912:7538): avc: denied { write } for pid=51861 comm="tp_osd_tp" path="pipe:[214084]" dev="pipefs" ino=214084 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.872:8516): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.871:9286): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.872:8159): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8953): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8352): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.607:9358): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.872:8018): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.601:8769): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.683:9430): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7744): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6771): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052636.314:6897): avc: denied { open } for pid=51861 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.596:7786): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.609:8593): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.607:6760): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.872:7691): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9041): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9312): avc: denied { read } for pid=35264 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.607:9191): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8826): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.609:9468): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.608:7412): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052630.449:6831): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.677:9212): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052961.564:8524): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.606:6869): avc: denied { read } for pid=35264 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.606:7820): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052613.718:6733): avc: denied { open } for pid=57335 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6666): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052860.699:8047): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.698:7803): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.314:6897): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.607:7117): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.979:6684): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.699:8050): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6943): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6674): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052615.231:6778): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.308:7778): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6957): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053022.333:8768): avc: denied { open } for pid=42520 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7549): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.608:8448): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8820): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053039.666:8926): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053023.662:8797): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.588:6927): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8536): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8068): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.330:6690): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.970:7356): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.787:7416): avc: denied { append } for pid=57335 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.596:7787): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.970:7576): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053022.601:8769): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9412): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053128.638:9415): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.635:8091): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8199): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8575): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8893): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6663): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052875.701:8130): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8817): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.610:7238): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7723): avc: denied { read } for pid=35264 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8339): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6851): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052943.662:8403): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6865): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.142:8422): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052715.626:7305): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052954.606:8484): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.608:9197): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.608:9198): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052963.074:8548): avc: denied { open } for pid=46133 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052861.616:8059): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.191:7952): avc: denied { read } for pid=42520 comm="msgr-worker-1" path="socket:[199143]" dev="sockfs" ino=199143 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.652:8513): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.609:9465): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8824): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.877:8982): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.608:7124): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.330:6690): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6776): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9003): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.665:8911): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.662:7706): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8824): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.732:7331): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7131): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052872.762:8098): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.607:9037): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.670:8756): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8952): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052613.664:6727): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052611.661:6697): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.607:9041): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.553:8754): avc: denied { search } for pid=26625 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.622:7793): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.872:9022): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=52349 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.924:7210): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.608:9194): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.607:7233): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.031:6685): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.319:7780): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052696.028:7165): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.664:7083): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6752): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8196): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052894.104:8214): avc: denied { open } for pid=43954 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8067): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.595:7704): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.607:8066): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8119): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7985): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053022.613:8771): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053146.131:9477): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7651): avc: denied { read } for pid=35264 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6754): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8773): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052791.284:7692): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.642:8044): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[169533]" dev="sockfs" ino=169533 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8079): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7225): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6946): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.106:9443): avc: denied { open } for pid=43954 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052696.028:7164): avc: denied { write } for pid=26250 comm="safe_timer" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6867): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053042.701:8948): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.843:6770): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052712.903:7253): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.179:9168): avc: denied { open } for pid=42520 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7106): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.602:7339): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.162:6688): avc: denied { open } for pid=42520 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052796.542:7756): avc: denied { read } for pid=26625 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6922): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6750): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.180:8349): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6672): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.971:7605): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.623:9411): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6750): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9393): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.648:8360): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052974.607:8621): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.698:8634): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.607:6873): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8813): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.653:8599): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.477:9277): avc: denied { search } for pid=51861 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052862.072:8060): avc: denied { write } for pid=26250 comm="safe_timer" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.613:7298): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8352): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9173): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.916:7334): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9005): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.634:9205): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053040.673:8936): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.653:8600): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.677:9211): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053123.098:9342): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.701:8945): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.607:7822): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052795.296:7751): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.606:8065): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.606:7288): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8807): avc: denied { search } for pid=35264 comm="node_exporter" name="diff" dev="sda1" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053121.971:9334): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052797.969:7759): avc: denied { search } for pid=41927 comm="grafana-server" name="diff" dev="sda1" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7723): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.611:8212): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052644.608:6953): avc: denied { read } for pid=35264 comm="node_exporter" name="eno1" dev="sysfs" ino=34826 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052940.117:8392): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6952): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052701.970:7216): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.634:8012): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6865): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7109): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.135:9426): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.609:6764): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.314:6896): avc: denied { read } for pid=51861 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.605:8192): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7647): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8964): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.607:8580): avc: denied { read } for pid=35264 comm="node_exporter" name="eno1" dev="sysfs" ino=34826 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053125.110:9384): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.871:8363): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.556:8989): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181444 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7744): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052859.634:8012): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.701:8944): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7131): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9178): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6955): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.116:9166): avc: denied { write } for pid=26250 comm="msgr-worker-2" laddr=172.21.15.106 lport=3300 faddr=172.21.15.193 fport=56686 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.607:8873): avc: denied { getattr } for pid=102277 comm="pgrep" path="/proc/26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.607:7655): avc: denied { read } for pid=35264 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.607:9329): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.643:8174): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.605:7818): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7091): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7541): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.677:9211): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8111): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.653:8599): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.607:8583): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8589): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052857.970:7994): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052969.872:8606): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.609:9050): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052654.104:6968): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.872:7392): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.607:7118): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052797.595:7758): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.179:9169): avc: denied { open } for pid=42520 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053110.686:9301): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052782.970:7641): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8067): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.610:7379): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.649:8451): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9394): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053031.971:8891): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.971:9398): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.607:8121): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9353): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.877:8982): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.609:8206): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.179:9168): avc: denied { read } for pid=42520 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.608:7293): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.549:7688): avc: denied { read } for pid=92153 comm="pgrep" name="status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052858.320:8002): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8815): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.190:7947): avc: denied { read } for pid=46133 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052712.903:7253): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.605:8818): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.873:7398): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052782.018:7636): avc: denied { read } for pid=75908 comm="msgr-worker-0" path="pipe:[275932]" dev="pipefs" ino=275932 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.634:9205): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053040.413:8934): avc: denied { open } for pid=57335 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.605:6825): avc: denied { read } for pid=35264 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053117.035:9330): avc: denied { write } for pid=42520 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=108033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7222): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8341): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9321): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.534:7387): avc: denied { getattr } for pid=88954 comm="pgrep" path="/proc/26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.179:9168): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.610:7236): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7987): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.598:7101): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053123.110:9344): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052792.688:7695): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.252:8331): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.116:9164): avc: denied { write } for pid=26250 comm="safe_timer" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.659:6905): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053030.673:8888): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053105.010:9214): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052612.325:6702): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.486:6902): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7746): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7658): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052956.097:8495): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.647:8358): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.662:7081): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[190176]" dev="sockfs" ino=190176 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.606:7361): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8426): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.608:8089): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.610:9471): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8424): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8572): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.605:7629): avc: denied { write } for pid=46133 comm="msgr-worker-1" laddr=172.21.15.106 lport=57700 faddr=172.21.15.106 fport=6804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052949.872:8474): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8993): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052611.970:6700): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8076): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.123:9424): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6921): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052724.607:7363): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.342:6693): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.663:8910): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052695.970:7162): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8534): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.070:8546): avc: denied { read } for pid=42520 comm="msgr-worker-1" path="socket:[281030]" dev="sockfs" ino=281030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.366:6737): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053040.673:8938): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.596:7786): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.607:8584): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052795.629:7753): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052611.970:6699): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052789.872:7691): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.665:8911): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.318:6647): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[225820]" dev="sockfs" ino=225820 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052637.662:6910): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.606:6749): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.606:6827): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.606:8117): avc: denied { read } for pid=35264 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.962:6844): avc: denied { write } for pid=46133 comm="msgr-worker-2" laddr=172.21.15.106 lport=41126 faddr=172.21.15.106 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6945): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052958.227:8509): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.916:7333): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.609:6768): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[169533]" dev="sockfs" ino=169533 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.080:8008): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.970:7603): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7541): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.969:9293): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7223): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.324:6898): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.643:8046): avc: denied { write } for pid=26250 comm="msgr-worker-2" laddr=172.21.15.106 lport=3300 faddr=172.21.15.106 fport=52372 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052630.660:6835): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.609:6766): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052616.160:6780): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053110.686:9301): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052729.872:7396): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[323712]" dev="sockfs" ino=323712 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052619.872:6812): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.607:7821): avc: denied { read } for pid=35264 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8777): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7105): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.366:6737): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052969.594:8605): avc: denied { read } for pid=99032 comm="pgrep" name="status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.251:8557): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052701.971:7218): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.877:8982): avc: denied { read } for pid=57335 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.605:7285): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.636:8125): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052963.663:8554): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.602:7278): avc: denied { open } for pid=26250 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.394:8987): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8353): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052637.662:6913): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052704.606:7224): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.608:8829): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.601:8770): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.259:8559): avc: denied { read } for pid=26625 comm="mgr-fin" name="lib" dev="overlay" ino=265758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052957.316:8499): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.670:8756): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.609:9363): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.830:7312): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7365): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7157): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052704.607:7232): avc: denied { read } for pid=35264 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.333:8767): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.608:9361): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7985): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.608:9197): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6750): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.683:9429): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7220): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052619.872:6815): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=57088 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.970:7998): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.661:8633): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.608:8083): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.622:7742): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7366): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052630.449:6831): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.613:8835): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7728): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052715.626:7305): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.607:8066): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9317): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052637.662:6912): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.607:6758): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052954.105:8481): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8894): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053039.666:8926): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8965): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.606:7291): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052859.872:8017): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.609:8973): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.699:8179): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6957): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7725): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052940.105:8391): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.634:8011): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.714:8999): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.549:7688): avc: denied { search } for pid=92153 comm="pgrep" name="26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.634:9203): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052940.105:8390): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7227): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.605:8195): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8441): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.871:8368): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.607:8585): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.217:7546): avc: denied { read } for pid=57335 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053028.614:8868): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.699:8049): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.602:7282): avc: denied { dac_read_search } for pid=26250 comm="rocksdb:high0" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052939.312:8353): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053122.637:9339): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.609:9363): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.190:7949): avc: denied { write } for pid=46133 comm="osd_srv_heartbt" path="pipe:[192504]" dev="pipefs" ino=192504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.649:8453): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.673:8938): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.636:8125): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.648:8359): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7158): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052947.970:8468): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.565:8804): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.587:6860): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8118): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.872:7200): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053128.638:9414): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.872:8162): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052940.105:8389): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.699:7633): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9415): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.606:8576): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8994): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.653:8601): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8070): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6847): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.607:8444): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7551): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.677:9210): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.606:9188): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.896:7088): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.609:7415): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052947.970:8470): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8964): avc: denied { read } for pid=35264 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.106:9443): avc: denied { read } for pid=43954 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052873.656:8106): avc: denied { read } for pid=51861 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052613.664:6728): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.605:8198): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052617.656:6804): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053123.098:9342): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052730.180:7400): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.677:9210): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.969:7267): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6957): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.622:7794): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9459): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.608:8907): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053023.661:8796): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.606:8424): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.224:8975): avc: denied { append } for pid=46133 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052873.701:8109): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.585:6738): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8119): avc: denied { read } for pid=35264 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.969:9240): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052611.970:6698): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052875.522:8128): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053042.701:8949): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.405:8746): avc: denied { write } for pid=78441 comm="safe_timer" path="pipe:[281027]" dev="pipefs" ino=281027 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.609:8207): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.606:6872): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.970:7604): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.130:8417): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052697.470:7172): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6679): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[289585]" dev="sockfs" ino=289585 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.607:9355): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.609:8206): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.608:7374): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.608:9361): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.183:9259): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.678:9283): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.903:7303): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6846): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052869.046:8095): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.606:9450): avc: denied { read } for pid=35264 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8073): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052617.656:6802): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.880:7965): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052774.912:7539): avc: denied { read } for pid=51861 comm="msgr-worker-1" path="pipe:[214084]" dev="pipefs" ino=214084 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.877:8982): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052881.970:8183): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052617.656:6802): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052947.901:8466): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052776.035:7557): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.871:7796): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052717.925:7322): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052780.192:7622): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.606:6870): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.607:7115): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9037): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.622:7792): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.607:8072): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.104:7270): avc: denied { read } for pid=43954 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.673:8938): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.622:7793): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7988): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.607:7823): avc: denied { read } for pid=35264 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.872:8158): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052803.256:7815): avc: denied { search } for pid=34448 comm="ceph-crash" name="var" dev="sda1" ino=1444313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c77,c1016 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052880.313:8169): avc: denied { read } for pid=42520 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.105:8480): avc: denied { open } for pid=43954 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052776.970:7578): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8827): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.969:7266): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053128.905:9421): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.182:8986): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6866): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053039.872:8931): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7658): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.969:7351): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.608:7123): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.606:7820): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.872:8886): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[382550]" dev="sockfs" ino=382550 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.668:9013): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.698:8636): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052957.111:8498): avc: denied { open } for pid=46133 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6866): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052618.390:6809): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052974.653:8624): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.969:9238): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.971:7581): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052863.391:8062): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052633.666:6855): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052860.494:8038): avc: denied { read } for pid=57335 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.253:8332): avc: denied { write } for pid=26625 comm="safe_timer" path="pipe:[149545]" dev="pipefs" ino=149545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.830:7313): avc: denied { open } for pid=46133 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.307:8566): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.608:6951): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.606:7362): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.605:7283): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6925): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.606:8425): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.612:7839): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052704.606:7229): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.460:8142): avc: denied { read } for pid=57335 comm="msgr-worker-1" path="pipe:[226359]" dev="pipefs" ino=226359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.970:7357): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.610:8597): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052700.830:7213): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.608:7738): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.606:9449): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.969:9237): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.971:6777): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.307:8564): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053122.637:9339): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.608:6951): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.872:6936): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9325): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8955): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.726:9001): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053128.690:9420): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9313): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.614:8124): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.507:6652): avc: denied { search } for pid=83253 comm="pgrep" name="26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052619.872:6817): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[294689]" dev="sockfs" ino=294689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.601:7275): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053122.600:9338): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052776.970:7579): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.598:7100): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052939.026:8347): avc: denied { read } for pid=42520 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.682:7084): avc: denied { write } for pid=75440 comm="safe_timer" path="pipe:[276751]" dev="pipefs" ino=276751 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8961): avc: denied { read } for pid=35264 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052776.970:7575): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052942.118:8399): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.872:9017): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053128.099:9404): avc: denied { write } for pid=78441 comm="msgr-worker-2" laddr=172.21.15.106 lport=60440 faddr=172.21.15.193 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6863): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.725:8154): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.595:7703): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053039.476:8922): avc: denied { read } for pid=46133 comm="msgr-worker-1" path="socket:[226105]" dev="sockfs" ino=226105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.609:8205): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052616.247:6781): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.604:7154): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052781.235:7634): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053031.970:8890): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052958.227:8508): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.612:7840): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.970:7749): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9006): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.606:8203): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052882.663:8187): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.647:8358): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052959.319:8511): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052639.872:6933): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6747): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.608:7122): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.872:9434): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.609:9050): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7368): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.026:8347): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.872:9437): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.683:8981): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.319:8512): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.607:8902): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.714:8999): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9042): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052633.661:6853): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7110): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.872:9021): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7988): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052954.105:8480): avc: denied { read } for pid=43954 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053026.614:8863): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.602:7280): avc: denied { getattr } for pid=26250 comm="rstore_compact" path="/sys/dev/block/253:4" dev="sysfs" ino=45180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.307:8566): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053028.970:8870): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.596:7785): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052954.606:8483): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.556:8989): avc: denied { read } for pid=26625 comm="mgr-fin" name="localtime" dev="overlay" ino=265527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8052): avc: denied { search } for pid=41927 comm="grafana-server" name="dashboards" dev="sda1" ino=1444451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052980.228:8629): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.510:8753): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.104:7271): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8430): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.394:8987): avc: denied { open } for pid=57335 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052698.614:7179): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.318:6644): avc: denied { write } for pid=57335 comm="safe_timer" path="pipe:[226359]" dev="pipefs" ino=226359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.871:7797): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9397): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052776.971:7580): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052698.830:7196): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7646): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.970:8915): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.872:9435): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052782.135:7637): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052615.594:6779): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.606:6940): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.979:6682): avc: denied { search } for pid=41927 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052611.970:6700): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.607:9044): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.601:7275): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7320): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.725:8152): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.453:9408): avc: denied { write } for pid=42520 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=108033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7369): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6946): avc: denied { read } for pid=35264 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8578): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9326): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.969:7810): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6673): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.970:7998): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052894.104:8216): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9349): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052947.314:8464): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[169533]" dev="sockfs" ino=169533 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052616.366:6782): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.585:6740): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.177:6892): avc: denied { write } for pid=75440 comm="msgr-worker-1" laddr=172.21.15.106 lport=43914 faddr=172.21.15.106 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052803.256:7815): avc: denied { dac_override } for pid=34448 comm="ceph-crash" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.928:8841): avc: denied { open } for pid=46133 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7727): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052875.713:8132): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.606:7111): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.971:8134): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8193): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052960.227:8522): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8076): avc: denied { read } for pid=35264 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.634:9204): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053106.969:9240): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.872:7596): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.608:7120): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.601:7274): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8807): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.598:7102): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.608:8448): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.713:8131): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7722): avc: denied { read } for pid=35264 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.776:8913): avc: denied { read } for pid=57335 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052636.314:6896): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.190:7950): avc: denied { read } for pid=46133 comm="msgr-worker-2" path="pipe:[192504]" dev="pipefs" ino=192504 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.099:9405): avc: denied { write } for pid=78441 comm="msgr-worker-1" laddr=172.21.15.106 lport=44074 faddr=172.21.15.106 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.634:8011): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.608:9196): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6665): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.620:7592): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9044): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7321): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.970:7749): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052713.841:7256): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052938.969:8344): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7161): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052791.284:7693): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9452): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.486:6901): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053028.970:8871): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7721): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.507:6653): avc: denied { getattr } for pid=83253 comm="pgrep" path="/proc/26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.609:6764): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.608:6879): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.473:6843): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8956): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.606:6871): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7160): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053029.872:8883): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.611:7837): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.613:8337): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9034): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6867): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.513:7628): avc: denied { read } for pid=26625 comm="msgr-worker-0" path="socket:[231325]" dev="sockfs" ino=231325 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.608:8972): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6923): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.608:8446): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.608:6876): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.871:7799): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052630.658:6834): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.609:6960): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.970:8133): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.605:6822): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9308): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.606:7289): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8147): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.589:6930): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.608:8972): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.260:8561): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919874 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.507:6654): avc: denied { open } for pid=83253 comm="pgrep" path="/proc/26250/status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9313): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9393): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052637.662:6913): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.251:8557): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6773): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.969:7809): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053034.606:8893): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6664): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9180): avc: denied { read } for pid=35264 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.872:8164): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[355330]" dev="sockfs" ino=355330 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.608:7668): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052943.309:8401): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052954.609:8493): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.924:7209): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052940.117:8392): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.606:8573): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9307): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.620:7301): avc: denied { remove_name } for pid=26250 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9414): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052875.043:8127): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.307:8565): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.602:7338): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.366:6737): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052857.077:7988): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.970:6776): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.590:7713): avc: denied { read } for pid=26625 comm="msgr-worker-1" path="pipe:[149545]" dev="pipefs" ino=149545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9186): avc: denied { read } for pid=35264 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8429): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.606:9187): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.606:7287): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8353): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053110.384:9298): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.608:9462): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8342): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.273:8799): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052783.050:7642): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9185): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.896:7087): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6851): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.174:8551): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8077): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052611.970:6698): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.123:9423): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6751): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.602:7339): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.507:6654): avc: denied { read } for pid=83253 comm="pgrep" name="status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052960.227:8523): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052635.262:6885): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.970:9381): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.601:7274): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053121.970:9332): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052737.015:7423): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.622:7792): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.620:7589): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6743): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7541): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8963): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.608:6878): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.872:6676): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.699:8181): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.608:7412): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.608:9196): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.089:7760): avc: denied { read } for pid=51861 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7162): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.970:7577): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.873:8166): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.358:8630): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.606:8116): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052631.534:6837): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1181444 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.606:7647): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7093): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052963.070:8542): avc: denied { write } for pid=78441 comm="ceph_timer" path="pipe:[281027]" dev="pipefs" ino=281027 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7323): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.606:6872): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9177): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7663): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052639.589:6929): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.460:8141): avc: denied { write } for pid=57335 comm="tp_osd_tp" path="pipe:[226359]" dev="pipefs" ino=226359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.259:8559): avc: denied { read } for pid=26625 comm="mgr-fin" name="lib" dev="sda1" ino=265758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7540): avc: denied { open } for pid=26625 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7716): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.970:8454): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.970:8456): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9175): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.971:7999): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9393): avc: denied { search } for pid=41927 comm="grafana-server" name="diff" dev="sda1" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052724.610:7380): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.643:8174): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052969.872:8607): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.609:9467): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.607:7662): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6851): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053128.638:9414): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.620:7590): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.123:9425): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.970:9379): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052789.549:7688): avc: denied { open } for pid=92153 comm="pgrep" path="/proc/26250/status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.725:8153): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.871:7348): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=33857 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.074:8548): avc: denied { read } for pid=46133 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.589:6928): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8113): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9415): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052875.970:8133): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.142:8422): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053125.110:9384): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8444): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9039): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.307:8563): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052704.607:7234): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.969:7268): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.658:6663): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052713.098:7254): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052776.971:7580): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053123.110:9344): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.606:9026): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8197): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.970:7996): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9397): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.042:7774): avc: denied { search } for pid=51861 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053111.035:9303): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.622:7741): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.608:8908): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8814): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.608:6761): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8191): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9005): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.622:7743): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.608:8587): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9041): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.701:8944): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.473:6843): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052711.954:7245): avc: denied { read } for pid=42520 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.853:7086): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6948): avc: denied { read } for pid=35264 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7092): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052962.970:8539): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053026.614:8862): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.106:9444): avc: denied { getattr } for pid=43954 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.804:7311): avc: denied { write } for pid=46133 comm="msgr-worker-0" laddr=172.21.15.106 lport=6816 faddr=172.21.15.193 fport=57382 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.663:8837): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.607:9454): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.970:8454): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053027.574:8866): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.607:6949): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8809): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.585:6741): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.803:7308): avc: denied { read } for pid=46133 comm="msgr-worker-0" path="socket:[242377]" dev="sockfs" ino=242377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.585:6738): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052636.314:6896): avc: denied { search } for pid=51861 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.871:7796): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053048.614:9011): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9314): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7659): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8957): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8775): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.534:7386): avc: denied { open } for pid=88954 comm="pgrep" path="/proc/26218/status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052943.309:8402): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052639.588:6927): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.608:7120): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.970:7995): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.871:7800): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=46114 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7665): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6954): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.507:6652): avc: denied { open } for pid=83253 comm="pgrep" path="/proc/26218/status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052717.924:7317): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052881.971:8186): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052710.925:7241): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.678:9282): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.608:7668): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052947.970:8469): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.609:8090): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.080:8008): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052704.610:7237): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8591): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053107.785:9247): avc: denied { read } for pid=46133 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.606:9028): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7323): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052939.871:8366): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9460): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052734.971:7418): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8810): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9353): avc: denied { read } for pid=35264 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.683:9429): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.307:8563): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.636:8125): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.682:9374): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.043:8127): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053114.606:9326): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7552): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.606:7645): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052858.614:8006): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053045.534:8977): avc: denied { append } for pid=51861 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.613:8771): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052610.162:6687): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9178): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.874:8639): avc: denied { read } for pid=51861 comm="msgr-worker-2" path="pipe:[214085]" dev="pipefs" ino=214085 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.607:7730): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.970:9393): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.606:9025): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9319): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.639:9369): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052610.330:6689): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052981.270:8641): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.872:8885): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[387249]" dev="sockfs" ino=387249 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.606:9187): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.609:7828): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.608:8832): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7104): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052698.830:7197): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.428:7768): avc: denied { write } for pid=78441 comm="msgr-worker-0" laddr=172.21.15.106 lport=33968 faddr=172.21.15.106 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.609:8909): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.970:9007): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.634:9205): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052880.643:8173): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.596:7786): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.609:8206): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7225): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.648:8359): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.549:7687): avc: denied { getattr } for pid=92153 comm="pgrep" path="/proc/26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9414): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.872:9438): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.606:7362): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.608:7669): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052795.629:7754): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052859.634:8015): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053123.662:9345): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053122.637:9339): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.903:7304): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.924:7209): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052949.872:8479): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[368913]" dev="sockfs" ino=368913 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.970:7603): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.609:7127): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616053106.969:9237): avc: denied { search } for pid=41927 comm="grafana-server" name="dashboards" dev="sda1" ino=1444451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052632.473:6843): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.871:7802): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[339512]" dev="sockfs" ino=339512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.608:8445): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.871:9285): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8962): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053108.634:9251): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052734.606:7406): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7832): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.609:6763): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.595:7704): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052637.662:6910): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052704.610:7236): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.609:9469): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052699.872:7205): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=34654 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052617.656:6803): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.043:7775): avc: denied { open } for pid=51861 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.610:6965): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.534:7386): avc: denied { search } for pid=88954 comm="pgrep" name="26218" dev="proc" ino=132230 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053036.182:8916): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.683:9431): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8828): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.610:9051): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052610.162:6688): avc: denied { read } for pid=42520 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8534): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052969.872:8608): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7654): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8075): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8339): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052654.104:6966): avc: denied { open } for pid=43954 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7161): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052699.924:7210): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.664:7552): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053025.567:8845): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.871:9285): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.606:8112): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.481:8752): avc: denied { append } for pid=51861 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.921:9377): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7663): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.610:7830): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8054): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.609:6880): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.606:9451): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.584:6655): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.606:7724): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052730.180:7401): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052774.912:7537): avc: denied { write } for pid=51861 comm="msgr-worker-1" laddr=172.21.15.106 lport=6820 faddr=172.21.15.193 fport=40026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.969:7354): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.587:6860): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.623:6919): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052957.316:8500): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053127.970:9396): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.971:7605): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052617.020:6800): avc: denied { search } for pid=57335 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.284:7700): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.873:6680): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053145.689:9476): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053125.110:9387): avc: denied { read } for pid=26625 comm="msgr-worker-1" path="pipe:[149545]" dev="pipefs" ino=149545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.606:9450): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.605:7285): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8589): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052980.168:8628): avc: denied { open } for pid=57335 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052800.969:7811): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052945.312:8459): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.613:8835): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.606:7407): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7110): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052698.830:7196): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.979:6682): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052722.873:7358): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919874 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.026:8348): avc: denied { read } for pid=42520 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.607:8585): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.607:8874): avc: denied { read } for pid=102277 comm="pgrep" name="status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052704.606:7227): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053021.405:8748): avc: denied { write } for pid=78441 comm="msgr-worker-1" laddr=172.21.15.106 lport=53382 faddr=172.21.15.106 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6744): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.383:8170): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.898:7155): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.664:7552): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.872:8157): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9308): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.607:8875): avc: denied { getattr } for pid=102277 comm="pgrep" path="/proc/26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.610:7384): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.606:7361): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052630.449:6832): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8955): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7988): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.596:7787): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052729.872:7393): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6753): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.609:6881): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.605:7816): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052969.872:8611): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[372323]" dev="sockfs" ino=372323 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052974.653:8623): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7107): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.969:7810): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052974.607:8621): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7749): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052732.182:7405): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052785.336:7679): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052785.336:7681): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052880.643:8171): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053039.872:8930): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.123:9424): avc: denied { read } for pid=26625 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.168:7709): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052612.342:6704): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6772): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.591:7961): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8053): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.608:9193): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.284:7700): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.587:6859): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.510:8753): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.198:7540): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.607:8581): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.971:7418): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052639.872:6935): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052613.664:6726): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052948.154:8471): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052969.872:8609): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.609:6961): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.666:8528): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053040.971:8946): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.477:9278): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.969:8772): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.608:7375): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052786.208:7683): avc: denied { read } for pid=57335 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.649:8452): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.599:7198): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053042.626:8947): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.606:7649): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9175): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9182): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8147): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.556:8989): avc: denied { search } for pid=26625 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052620.402:6819): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052697.921:7176): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052875.043:8126): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052612.342:6703): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.872:8163): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=57814 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.606:7407): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052959.872:8515): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.607:7731): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.871:9289): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052737.015:7423): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052873.701:8109): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053129.135:9427): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7226): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.606:8487): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.607:7732): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.874:8637): avc: denied { search } for pid=51861 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052776.970:7575): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.682:9374): avc: denied { read } for pid=26250 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9178): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.971:7163): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.643:8171): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053027.574:8867): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.969:9295): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053030.651:8887): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.605:8200): avc: denied { read } for pid=35264 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052695.970:7159): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052701.970:7216): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7322): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053110.685:9299): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.970:6775): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.606:9027): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7715): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052637.662:6913): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8956): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.969:9294): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052974.607:8622): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.606:9031): avc: denied { read } for pid=35264 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052712.891:7252): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052869.872:8097): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6748): avc: denied { read } for pid=35264 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.606:9446): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.971:8134): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052711.955:7247): avc: denied { read } for pid=46133 comm="msgr-worker-2" path="socket:[201142]" dev="sockfs" ino=201142 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.625:9201): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.460:8140): avc: denied { write } for pid=42520 comm="tp_osd_tp" path="pipe:[190497]" dev="pipefs" ino=190497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052699.924:7209): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.805:7133): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053106.970:9242): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7729): avc: denied { read } for pid=35264 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7112): avc: denied { read } for pid=35264 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.872:6932): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052980.512:8632): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="socket:[148159]" dev="sockfs" ino=148159 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.872:6939): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[300804]" dev="sockfs" ino=300804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.620:7590): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.872:8165): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[354345]" dev="sockfs" ino=354345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052940.117:8392): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8053): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.805:7132): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8814): avc: denied { read } for pid=35264 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052970.298:8613): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.634:9202): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052971.969:8616): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.930:7260): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.871:9288): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.670:8758): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052859.872:8016): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052704.607:7231): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.263:8562): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.190:7947): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.591:7963): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052717.830:7313): avc: denied { read } for pid=46133 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9176): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052774.827:7531): avc: denied { append } for pid=26625 comm="log" path="/var/log/ceph/ceph-mgr.smithi106.nakomw.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.971:9399): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.607:8069): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053109.678:9283): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.853:7086): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052634.607:6874): avc: denied { read } for pid=35264 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.606:9349): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.313:8169): avc: denied { open } for pid=42520 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052856.074:7966): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.598:7100): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.607:6758): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052730.978:7402): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7830): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7093): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.609:8594): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.608:7375): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.970:7575): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052939.312:8352): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.607:8082): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6748): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052859.634:8011): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053028.626:8869): avc: denied { append } for pid=43954 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.701:7807): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.394:8987): avc: denied { read } for pid=57335 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052881.971:8185): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.611:7838): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052638.970:6920): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053114.606:9315): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052703.662:7219): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.607:7823): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=35021 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7830): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8896): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.607:6755): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.607:8440): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.608:7372): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.609:7125): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.970:8456): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.916:7333): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052785.336:7679): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052636.177:6891): avc: denied { read } for pid=75440 comm="msgr-worker-1" path="pipe:[276752]" dev="pipefs" ino=276752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.928:8841): avc: denied { read } for pid=46133 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.699:8050): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.979:6683): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052631.663:6838): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.614:9368): avc: denied { read } for pid=42520 comm="msgr-worker-2" path="socket:[197566]" dev="sockfs" ino=197566 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052780.699:7633): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052717.925:7323): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052619.872:6811): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053028.970:8872): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053039.476:8920): avc: denied { write } for pid=57335 comm="msgr-worker-2" laddr=172.21.15.106 lport=41248 faddr=172.21.15.106 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053029.607:8876): avc: denied { search } for pid=102277 comm="pgrep" name="26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7716): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.609:6959): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12423 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.190:7947): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052704.606:7220): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.609:7376): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052875.043:8126): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052969.594:8604): avc: denied { getattr } for pid=99032 comm="pgrep" path="/proc/26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052730.180:7400): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.635:8091): avc: denied { search } for pid=26250 comm="safe_timer" name="mon.smithi106" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052611.970:6700): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.606:8577): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.970:8534): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052609.658:6666): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052775.217:7546): avc: denied { open } for pid=57335 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.872:9433): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.609:9466): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052800.698:7806): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.830:7312): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052611.970:6700): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.653:8598): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7322): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052940.117:8392): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052793.296:7702): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053046.970:9002): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052884.606:8204): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053108.465:9248): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053127.971:9398): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052949.872:8472): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052960.227:8522): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052612.660:6723): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.930:7257): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052638.970:6925): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.217:7545): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8147): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.609:7295): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.928:7335): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.606:8488): avc: denied { read } for pid=35264 comm="node_exporter" name="hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.607:6828): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.699:8181): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.607:8586): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.269:7959): avc: denied { read } for pid=42520 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.413:8933): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.607:8968): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052717.925:7322): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053134.606:9448): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.606:9027): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.268:6857): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.607:8967): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.607:9328): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.626:8991): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.609:7128): avc: denied { search } for pid=35264 comm="node_exporter" name="host" dev="sda1" ino=1839629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052717.830:7312): avc: denied { open } for pid=46133 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.613:8771): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052798.428:7767): avc: denied { read } for pid=78441 comm="msgr-worker-0" path="pipe:[281026]" dev="pipefs" ino=281026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.903:7303): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.606:8895): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052945.207:8458): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.606:7819): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6848): avc: denied { lock } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052779.872:7595): avc: denied { search } for pid=43954 comm="prometheus" name="/" dev="overlay" ino=1966090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052620.402:6818): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052624.606:6826): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052729.534:7388): avc: denied { search } for pid=88954 comm="pgrep" name="26250" dev="proc" ino=153131 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052881.970:8184): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9184): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.639:9370): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052724.607:7365): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.871:7342): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7658): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052730.978:7403): avc: denied { getattr } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.608:9362): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7714): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052969.872:8606): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.608:7737): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.609:7296): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053030.651:8887): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052644.607:6943): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.610:8208): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7716): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052969.872:8612): avc: denied { read } for pid=43954 comm="prometheus" path="socket:[367301]" dev="sockfs" ino=367301 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.608:8448): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.602:7338): avc: denied { getattr } for pid=26250 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053022.333:8768): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.969:9237): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052938.969:8343): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053121.970:9332): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7718): avc: denied { search } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=164362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052775.198:7543): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052959.872:8514): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8115): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.970:6771): avc: denied { search } for pid=41927 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052619.872:6814): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.670:8759): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052864.608:8084): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="tmpfs" ino=12422 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7988): avc: denied { search } for pid=26218 comm="conmon" name="journal" dev="tmpfs" ino=12713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052610.031:6685): avc: denied { read } for pid=51861 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.608:8084): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052946.154:8462): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.602:7278): avc: denied { write } for pid=26250 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053026.327:8846): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.609:9049): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.683:9432): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052791.284:7692): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053121.971:9334): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052713.969:7268): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053109.376:9276): avc: denied { read } for pid=57335 comm="msgr-worker-1" path="pipe:[226359]" dev="pipefs" ino=226359 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052961.660:8525): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052962.970:8534): avc: denied { search } for pid=41927 comm="grafana-server" name="diff" dev="sda1" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053054.606:9029): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.585:6738): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052610.342:6692): avc: denied { getattr } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.607:7734): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.622:7795): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.607:7117): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.312:8353): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052701.927:7215): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052857.077:7986): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052938.969:8339): avc: denied { search } for pid=41927 comm="grafana-server" name="diff" dev="sda1" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.872:7599): avc: denied { connect } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8816): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.663:8838): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8958): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.608:7413): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.606:8115): avc: denied { search } for pid=35264 comm="node_exporter" name="1" dev="proc" ino=163635 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052971.969:8616): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8951): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.609:9200): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.607:7733): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.657:7080): avc: denied { append } for pid=57335 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.308:6643): avc: denied { append } for pid=51861 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.634:9204): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052794.132:7708): avc: denied { search } for pid=51861 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c407,c769 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052631.663:6838): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.970:7575): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052779.872:7600): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=33141 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053040.699:8942): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7323): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052873.662:8107): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9179): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053034.607:8898): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.970:9007): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9215): avc: denied { open } for pid=26625 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052718.955:7337): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.969:7351): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8812): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.607:7825): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/temp1_crit" dev="sysfs" ino=35030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052862.072:8061): avc: denied { read } for pid=26250 comm="msgr-worker-2" path="pipe:[131304]" dev="pipefs" ino=131304 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.605:8194): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.607:8585): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052693.927:7093): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.970:8456): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052694.609:7129): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.607:7409): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.607:8070): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.638:9413): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052784.607:7656): avc: denied { read } for pid=35264 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.605:7818): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053027.574:8866): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.596:7786): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053114.606:9320): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.608:8971): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052619.585:6810): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.606:7222): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052855.190:7948): avc: denied { append } for pid=46133 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.554:7783): avc: denied { write } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8427): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.969:8339): avc: denied { search } for pid=41927 comm="grafana-server" name="dashboards" dev="sda1" ino=1444451 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053040.701:8944): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052799.321:7781): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052944.607:8437): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9310): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.609:8595): avc: denied { search } for pid=35264 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052884.606:8201): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8149): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.725:8152): avc: denied { open } for pid=26625 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.872:6938): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[295421]" dev="sockfs" ino=295421 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.970:9243): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.872:6932): avc: denied { search } for pid=43954 comm="prometheus" name="etc" dev="sda1" ino=1966130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c216,c449 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.607:8968): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052964.259:8559): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/lib/python3.6/site-packages/remoto/process.py" dev="overlay" ino=918519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7661): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/class/net/eno2" dev="sysfs" ino=36282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052617.013:6798): avc: denied { write } for pid=75908 comm="safe_timer" path="pipe:[275932]" dev="pipefs" ino=275932 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.565:8806): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052693.927:7090): avc: denied { use } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.336:9170): avc: denied { search } for pid=57335 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c566 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.903:7303): avc: denied { search } for pid=26625 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052695.970:7160): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.607:9045): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.607:7664): avc: denied { getattr } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.872:6937): avc: denied { getattr } for pid=43954 comm="prometheus" laddr=172.21.15.106 lport=58968 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052611.970:6701): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052879.637:8147): avc: denied { search } for pid=26250 comm="safe_timer" name="diff" dev="sda1" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052969.594:8605): avc: denied { open } for pid=99032 comm="pgrep" path="/proc/26250/status" dev="proc" ino=153155 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6851): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052631.663:6839): avc: denied { write } for pid=26218 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053024.605:8807): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.605:6868): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.606:8063): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.605:9183): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.606:7107): avc: denied { read } for pid=35264 comm="node_exporter" name="fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.610:7381): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052734.607:7409): avc: denied { search } for pid=35264 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.970:8454): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.634:9205): avc: denied { write } for pid=26218 comm="conmon" name="socket" dev="tmpfs" ino=12717 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.608:8122): avc: denied { search } for pid=35264 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.855:9219): avc: denied { search } for pid=46133 comm="safe_timer" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052639.589:6928): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7747): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8952): avc: denied { search } for pid=35264 comm="node_exporter" name="7" dev="proc" ino=164356 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.606:9029): avc: denied { read } for pid=35264 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052881.971:8185): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.602:7340): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052964.251:8556): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052634.610:6882): avc: denied { search } for pid=35264 comm="node_exporter" name="user" dev="tmpfs" ino=12766 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052963.070:8543): avc: denied { read } for pid=78441 comm="msgr-worker-1" path="pipe:[281027]" dev="pipefs" ino=281027 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.970:6774): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.099:9401): avc: denied { write } for pid=78441 comm="ceph_timer" path="pipe:[281027]" dev="pipefs" ino=281027 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.969:7355): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052619.872:6813): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.609:6959): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052697.921:7178): avc: denied { sendto } for pid=26218 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052855.269:7959): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7365): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.614:9410): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053145.030:9473): avc: denied { getattr } for pid=26625 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919874 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6850): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053105.010:9215): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052873.656:8106): avc: denied { open } for pid=51861 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053054.606:9033): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052621.662:6820): avc: denied { search } for pid=26218 comm="conmon" name="systemd" dev="tmpfs" ino=12431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052695.970:7162): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.971:8000): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052776.971:7580): avc: denied { read } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.607:8966): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052799.871:7798): avc: denied { setopt } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.607:7825): avc: denied { read } for pid=35264 comm="node_exporter" name="temp1_crit" dev="sysfs" ino=35030 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6946): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053129.683:9429): avc: denied { dac_read_search } for pid=26250 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052614.607:6760): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052777.340:7582): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.366:6737): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8954): avc: denied { read } for pid=35264 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052782.970:7639): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052718.916:7332): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.608:6951): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.606:7717): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052880.699:8180): avc: denied { search } for pid=41927 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052879.737:8155): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053043.113:8950): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.970:7356): avc: denied { read open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052784.606:7649): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053038.497:8917): avc: denied { search } for pid=42520 comm="safe_timer" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053048.197:9010): avc: denied { search } for pid=42520 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c466,c901 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052793.595:7703): avc: denied { open } for pid=26218 comm="conmon" path="/dev/null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052714.903:7302): avc: denied { search } for pid=26625 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053124.608:9361): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.607:7363): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052614.606:6749): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.611:7836): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053128.099:9402): avc: denied { read } for pid=78441 comm="msgr-worker-1" path="pipe:[281027]" dev="pipefs" ino=281027 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052724.606:7359): avc: denied { search } for pid=35264 comm="node_exporter" name="/" dev="overlay" ino=1837659 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c176,c182 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.605:8819): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053106.969:9237): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052864.609:8090): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053021.510:8753): avc: denied { read } for pid=46133 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052874.607:8120): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8055): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053049.668:9014): avc: denied { open } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052795.484:7752): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053044.606:8953): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.606:8822): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052637.662:6912): avc: denied { write } for pid=26218 comm="conmon" name="null" dev="devtmpfs" ino=1028 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052874.606:8113): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=173284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { search } for pid=26625 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053114.606:9307): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053114.606:9318): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.606:6942): avc: denied { read } for pid=35264 comm="node_exporter" name="stat" dev="proc" ino=173283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052794.970:7749): avc: denied { open } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.609:7826): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.610:7833): avc: denied { read } for pid=35264 comm="node_exporter" name="mounts" dev="proc" ino=169482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052958.227:8508): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053104.606:9187): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052644.607:6944): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053024.663:8836): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.613:7299): avc: denied { search } for pid=35264 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616052624.605:6824): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052697.921:7177): avc: denied { read } for pid=26218 comm="conmon" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052804.610:7834): avc: denied { search } for pid=35264 comm="node_exporter" name="fs" dev="proc" ino=168461 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="sda1" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.969:7355): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053044.606:8961): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052719.871:7344): avc: denied { create } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053049.668:9013): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053110.319:9297): avc: denied { search } for pid=46133 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966167 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c526,c1008 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.598:7100): avc: denied { search } for pid=26250 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053040.688:8940): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.601:7274): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052857.077:7987): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.606:9348): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052962.513:8526): avc: denied { append } for pid=42520 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395843 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052804.607:7824): avc: denied { getattr } for pid=35264 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=35022 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052717.925:7320): avc: denied { write } for pid=26250 comm="fn_monstore" path="pipe:[133187]" dev="pipefs" ino=133187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052638.614:6918): avc: denied { signal } for pid=43954 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052714.601:7276): avc: denied { getattr } for pid=26250 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi106/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052701.970:7217): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052636.498:6903): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052947.314:8463): avc: denied { search } for pid=26218 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053104.605:9177): avc: denied { search } for pid=35264 comm="node_exporter" name="rpc" dev="proc" ino=4026532482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052944.606:8432): avc: denied { open } for pid=35264 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=21483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052954.606:8483): avc: denied { read } for pid=35264 comm="node_exporter" name="entropy_avail" dev="proc" ino=167755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052694.608:7121): avc: denied { open } for pid=35264 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052939.871:8370): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[361835]" dev="sockfs" ino=361835 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052789.621:7690): avc: denied { search } for pid=26250 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c261,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052632.969:6849): avc: denied { read } for pid=41927 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.699:8048): avc: denied { search } for pid=41927 comm="grafana-server" name="/" dev="overlay" ino=1966114 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c408,c667 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052938.970:8345): avc: denied { getattr } for pid=41927 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053124.614:9367): avc: denied { write } for pid=46133 comm="msgr-worker-1" laddr=172.21.15.106 lport=57700 faddr=172.21.15.106 fport=6804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052704.610:7235): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052609.507:6652): avc: denied { read } for pid=83253 comm="pgrep" name="status" dev="proc" ino=132267 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616052719.871:7349): avc: denied { write } for pid=43954 comm="prometheus" path="socket:[319170]" dev="sockfs" ino=319170 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053105.010:9217): avc: denied { read } for pid=26625 comm="safe_timer" name="os-release" dev="overlay" ino=265545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052734.609:7415): avc: denied { read } for pid=35264 comm="node_exporter" name="file-nr" dev="proc" ino=168462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053134.608:9463): avc: denied { search } for pid=35264 comm="node_exporter" name="kernel" dev="proc" ino=170313 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052696.806:7166): avc: denied { search } for pid=26625 comm="safe_timer" name="libpod-c17dbf9aede5f4765cd48848fd726e862d06b6fd1254e48f77ba1e375efbce18.scope" dev="cgroup" ino=7267 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616052860.970:8052): avc: denied { getattr } for pid=41927 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616053114.606:9324): avc: denied { read } for pid=35264 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616053046.726:9001): avc: denied { open } for pid=26625 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395481 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c17,c168 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"'] |
||||||||||||||
| pass | 5975164 |
|
2021-03-17 23:51:14 | 2021-03-18 07:10:08 | 2021-03-18 07:27:51 | 0:17:43 | 0:07:04 | 0:10:39 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/resolve_stuck_peering mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{ubuntu_latest}} | 2 |
| pass | 5975166 |
|
2021-03-17 23:51:15 | 2021-03-18 07:10:18 | 2021-03-18 07:36:32 | 0:26:14 | 0:16:07 | 0:10:07 | smithi | master | ubuntu | 20.04 | rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/classic task/test_cephadm} | 1 |
| pass | 5975168 |
|
2021-03-17 23:51:16 | 2021-03-18 07:11:19 | 2021-03-18 07:33:42 | 0:22:23 | 0:13:41 | 0:08:42 | smithi | master | rhel | 8.3 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-low-osd-mem-target supported-random-distro$/{rhel_8} tasks/prometheus} | 2 |
| pass | 5975170 |
|
2021-03-17 23:51:17 | 2021-03-18 07:11:29 | 2021-03-18 07:30:07 | 0:18:38 | 0:10:47 | 0:07:51 | smithi | master | centos | 8.3 | rados/standalone/{mon_election/classic supported-random-distro$/{centos_8} workloads/mgr} | 1 |
| pass | 5975172 |
|
2021-03-17 23:51:18 | 2021-03-18 07:11:29 | 2021-03-18 07:58:07 | 0:46:38 | 0:35:10 | 0:11:28 | smithi | master | ubuntu | 20.04 | rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_stable fixed-2 mode/packaged mon_election/classic msgr/async start tasks/rados_api_tests} | 2 |
| pass | 5975174 |
|
2021-03-17 23:51:19 | 2021-03-18 07:12:29 | 2021-03-18 07:30:42 | 0:18:13 | 0:10:34 | 0:07:39 | smithi | master | rhel | 8.3 | rados/singleton-nomsgr/{all/export-after-evict mon_election/connectivity rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975176 |
|
2021-03-17 23:51:20 | 2021-03-18 07:13:40 | 2021-03-18 08:01:13 | 0:47:33 | 0:40:48 | 0:06:45 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/classic msgr-failures/osd-delay objectstore/bluestore-stupid rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=jerasure-k=3-m=1} | 2 |
| pass | 5975178 |
|
2021-03-17 23:51:21 | 2021-03-18 07:14:20 | 2021-03-18 07:40:37 | 0:26:17 | 0:19:33 | 0:06:44 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/set-chunks-read} | 2 |
| pass | 5975180 |
|
2021-03-17 23:51:22 | 2021-03-18 07:15:21 | 2021-03-18 08:02:52 | 0:47:31 | 0:37:48 | 0:09:43 | smithi | master | ubuntu | 20.04 | rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/snaps-few-objects fixed-2 msgr/async-v1only root} | 2 |
| pass | 5975182 |
|
2021-03-17 23:51:23 | 2021-03-18 07:15:31 | 2021-03-18 07:33:19 | 0:17:48 | 0:08:26 | 0:09:22 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/test-crash mon_election/classic msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975184 |
|
2021-03-17 23:51:24 | 2021-03-18 07:15:31 | 2021-03-18 07:41:26 | 0:25:55 | 0:15:55 | 0:10:00 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975186 |
|
2021-03-17 23:51:25 | 2021-03-18 07:15:52 | 2021-03-18 07:33:05 | 0:17:13 | 0:08:13 | 0:09:00 | smithi | master | centos | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{centos_8} tasks/rados_striper} | 2 |
| pass | 5975188 |
|
2021-03-17 23:51:26 | 2021-03-18 07:16:12 | 2021-03-18 07:33:34 | 0:17:22 | 0:07:40 | 0:09:42 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/full-tiering mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975190 |
|
2021-03-17 23:51:27 | 2021-03-18 07:16:32 | 2021-03-18 07:55:58 | 0:39:26 | 0:29:48 | 0:09:38 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/fast mon_election/connectivity msgr-failures/osd-delay rados recovery-overrides/{more-async-recovery} supported-random-distro$/{centos_8} thrashers/default thrashosds-health workloads/ec-pool-snaps-few-objects-overwrites} | 2 |
| pass | 5975192 |
|
2021-03-17 23:51:28 | 2021-03-18 07:16:52 | 2021-03-18 07:53:06 | 0:36:14 | 0:25:11 | 0:11:03 | smithi | master | ubuntu | 20.04 | rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04-15.2.9 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/connectivity} | 2 |
| pass | 5975194 |
|
2021-03-17 23:51:29 | 2021-03-18 07:17:43 | 2021-03-18 07:37:36 | 0:19:53 | 0:10:52 | 0:09:01 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/connectivity objectstore/bluestore-low-osd-mem-target openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/fio_4K_rand_read} | 1 |
| pass | 5975196 |
|
2021-03-17 23:51:30 | 2021-03-18 07:18:13 | 2021-03-18 07:42:23 | 0:24:10 | 0:13:13 | 0:10:57 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/test_envlibrados_for_rocksdb mon_election/connectivity msgr-failures/none msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{ubuntu_latest}} | 1 |
| dead | 5975198 |
|
2021-03-17 23:51:31 | 2021-03-18 07:18:13 | 2021-03-18 07:24:54 | 0:06:41 | smithi | master | ubuntu | 20.04 | rados/cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_stable task/test_e2e} | 2 | ||
Failure Reason:
Error reimaging machines: 'smithi180.front.sepia.ceph.com' |
||||||||||||||
| pass | 5975200 |
|
2021-03-17 23:51:32 | 2021-03-18 07:19:24 | 2021-03-18 07:36:48 | 0:17:24 | 0:10:16 | 0:07:08 | smithi | master | rhel | 8.3 | rados/multimon/{clusters/6 mon_election/connectivity msgr-failures/many msgr/async-v2only no_pools objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8} tasks/mon_clock_with_skews} | 2 |
| pass | 5975202 |
|
2021-03-17 23:51:33 | 2021-03-18 07:19:54 | 2021-03-18 07:53:42 | 0:33:48 | 0:22:29 | 0:11:19 | smithi | master | centos | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-zstd rados supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/small-objects-balanced} | 2 |
| pass | 5975204 |
|
2021-03-17 23:51:34 | 2021-03-18 07:20:14 | 2021-03-18 07:48:14 | 0:28:00 | 0:16:05 | 0:11:55 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/classic start} | 2 |
| pass | 5975206 |
|
2021-03-17 23:51:35 | 2021-03-18 07:20:15 | 2021-03-18 07:43:04 | 0:22:49 | 0:13:59 | 0:08:50 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-comp-zstd rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975208 |
|
2021-03-17 23:51:36 | 2021-03-18 07:21:55 | 2021-03-18 07:40:25 | 0:18:30 | 0:12:39 | 0:05:51 | smithi | master | rhel | 8.3 | rados/singleton-nomsgr/{all/health-warnings mon_election/connectivity rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975210 |
|
2021-03-17 23:51:37 | 2021-03-18 07:21:56 | 2021-03-18 08:00:01 | 0:38:05 | 0:30:48 | 0:07:17 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-comp-lz4 rados recovery-overrides/{more-active-recovery} supported-random-distro$/{rhel_8} thrashers/fastread thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} | 3 |
| pass | 5975212 |
|
2021-03-17 23:51:38 | 2021-03-18 07:23:06 | 2021-03-18 07:58:31 | 0:35:25 | 0:29:03 | 0:06:22 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-comp-lz4 rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{rhel_8} thrashers/mapgap thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5975214 |
|
2021-03-17 23:51:39 | 2021-03-18 07:23:37 | 2021-03-18 07:48:41 | 0:25:04 | 0:15:04 | 0:10:00 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-comp-lz4 rados tasks/rados_cls_all validater/lockdep} | 2 |
| pass | 5975215 |
|
2021-03-17 23:51:40 | 2021-03-18 07:23:47 | 2021-03-18 08:07:29 | 0:43:42 | 0:33:28 | 0:10:14 | smithi | master | ubuntu | 18.04 | rados/monthrash/{ceph clusters/9-mons mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest} thrashers/one workloads/snaps-few-objects} | 2 |
| pass | 5975217 |
|
2021-03-17 23:51:41 | 2021-03-18 07:24:07 | 2021-03-18 08:00:51 | 0:36:44 | 0:24:51 | 0:11:53 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/luminous backoff/normal ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/fastclose rados thrashers/pggrow thrashosds-health workloads/rbd_cls} | 3 |
| pass | 5975219 |
|
2021-03-17 23:51:42 | 2021-03-18 07:25:08 | 2021-03-18 07:51:12 | 0:26:04 | 0:16:20 | 0:09:44 | smithi | master | ubuntu | 18.04 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_18.04} | 2 |
| pass | 5975222 |
|
2021-03-17 23:51:43 | 2021-03-18 07:25:48 | 2021-03-18 08:02:36 | 0:36:48 | 0:27:53 | 0:08:55 | smithi | master | ubuntu | 18.04 | rados/standalone/{mon_election/connectivity supported-random-distro$/{ubuntu_latest} workloads/misc} | 1 |
| pass | 5975223 |
|
2021-03-17 23:51:44 | 2021-03-18 07:25:48 | 2021-03-18 08:44:15 | 1:18:27 | 1:07:11 | 0:11:16 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/thrash-backfill-full mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{ubuntu_latest}} | 2 |
| pass | 5975224 |
|
2021-03-17 23:51:45 | 2021-03-18 07:26:29 | 2021-03-18 08:05:39 | 0:39:10 | 0:29:08 | 0:10:02 | smithi | master | centos | 8.3 | rados/singleton-bluestore/{all/cephtool mon_election/classic msgr-failures/none msgr/async-v1only objectstore/bluestore-bitmap rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975225 |
|
2021-03-17 23:51:46 | 2021-03-18 07:26:29 | 2021-03-18 07:48:55 | 0:22:26 | 0:06:19 | 0:16:07 | smithi | master | ubuntu | 18.04 | rados/objectstore/{backends/filejournal supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975226 |
|
2021-03-17 23:51:47 | 2021-03-18 07:26:29 | 2021-03-18 07:41:15 | 0:14:46 | 0:05:04 | 0:09:42 | smithi | master | ubuntu | 20.04 | rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/connectivity task/test_cephadm_repos} | 1 |
| pass | 5975227 |
|
2021-03-17 23:51:48 | 2021-03-18 07:27:50 | 2021-03-18 07:57:33 | 0:29:43 | 0:19:17 | 0:10:26 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/bluestore-hybrid rados supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/small-objects-localized} | 2 |
| pass | 5975228 |
|
2021-03-18 07:28:00 | 2021-03-18 07:28:00 | 2021-03-18 07:44:58 | 0:16:58 | 0:07:57 | 0:09:01 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/large-omap-object-warnings mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975229 |
|
2021-03-17 23:51:50 | 2021-03-18 07:28:11 | 2021-03-18 08:02:11 | 0:34:00 | 0:23:43 | 0:10:17 | smithi | master | ubuntu | 20.04 | rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_testing fixed-2 mode/root mon_election/connectivity msgr/async-v1only start tasks/rados_python} | 2 |
| pass | 5975230 |
|
2021-03-17 23:51:51 | 2021-03-18 07:28:21 | 2021-03-18 07:47:58 | 0:19:37 | 0:07:08 | 0:12:29 | smithi | master | ubuntu | 18.04 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-stupid supported-random-distro$/{ubuntu_latest} tasks/workunits} | 2 |
| dead | 5975231 |
|
2021-03-17 23:51:52 | 2021-03-18 07:29:42 | 2021-03-18 19:39:11 | 12:09:29 | smithi | master | centos | 8.3 | rados/singleton/{all/thrash-eio mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{centos_8}} | 2 | ||
Failure Reason:
hit max job timeout |
||||||||||||||
| pass | 5975232 |
|
2021-03-17 23:51:53 | 2021-03-18 07:29:42 | 2021-03-18 07:50:51 | 0:21:09 | 0:12:13 | 0:08:56 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/classic objectstore/bluestore-stupid openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/fio_4K_rand_rw} | 1 |
| pass | 5975233 |
|
2021-03-17 23:51:54 | 2021-03-18 07:29:42 | 2021-03-18 07:57:47 | 0:28:05 | 0:15:53 | 0:12:12 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975234 |
|
2021-03-17 23:51:55 | 2021-03-18 07:30:23 | 2021-03-18 08:06:12 | 0:35:49 | 0:25:21 | 0:10:28 | smithi | master | rados/upgrade/pacific-x/rgw-multisite/{clusters frontend overrides realm tasks upgrade/primary} | 2 | ||
| pass | 5975235 |
|
2021-03-17 23:51:56 | 2021-03-18 07:30:43 | 2021-03-18 09:12:39 | 1:41:56 | 1:32:31 | 0:09:25 | smithi | master | centos | 8.3 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/fastclose objectstore/filestore-xfs rados recovery-overrides/{default} supported-random-distro$/{centos_8} thrashers/fastread thrashosds-health workloads/ec-radosbench} | 2 |
| pass | 5975236 |
|
2021-03-17 23:51:57 | 2021-03-18 07:32:03 | 2021-03-18 08:13:38 | 0:41:35 | 0:32:54 | 0:08:41 | smithi | master | rhel | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{rhel_8} tasks/rados_workunit_loadgen_big} | 2 |
| pass | 5975237 |
|
2021-03-17 23:51:58 | 2021-03-18 07:33:14 | 2021-03-18 08:25:26 | 0:52:12 | 0:40:51 | 0:11:21 | smithi | master | ubuntu | 20.04 | rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_testing 1-start 2-thrash 3-tasks/rados_api_tests fixed-2 msgr/async-v2only root} | 2 |
| pass | 5975238 |
|
2021-03-17 23:51:59 | 2021-03-18 07:33:35 | 2021-03-18 07:51:03 | 0:17:28 | 0:07:44 | 0:09:44 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/lazy_omap_stats_output mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975239 |
|
2021-03-17 23:52:00 | 2021-03-18 07:33:35 | 2021-03-18 08:04:27 | 0:30:52 | 0:19:48 | 0:11:04 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{default} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{ubuntu_latest} thrashers/mapgap thrashosds-health workloads/small-objects} | 2 |
| pass | 5975240 |
|
2021-03-17 23:52:01 | 2021-03-18 07:33:45 | 2021-03-18 08:21:32 | 0:47:47 | 0:35:59 | 0:11:48 | smithi | master | centos | 8.2 | rados/cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975241 |
|
2021-03-17 23:52:03 | 2021-03-18 07:36:36 | 2021-03-18 08:06:02 | 0:29:26 | 0:21:47 | 0:07:39 | smithi | master | rhel | 8.3 | rados/singleton/{all/thrash-rados/{thrash-rados thrashosds-health} mon_election/classic msgr-failures/none msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{rhel_8}} | 2 |
| pass | 5975242 |
|
2021-03-17 23:52:05 | 2021-03-18 07:36:56 | 2021-03-18 08:05:01 | 0:28:05 | 0:17:35 | 0:10:30 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04} | 2 |
| pass | 5975243 |
|
2021-03-17 23:52:06 | 2021-03-18 07:37:37 | 2021-03-18 08:26:42 | 0:49:05 | 0:39:49 | 0:09:16 | smithi | master | centos | 8.3 | rados/standalone/{mon_election/classic supported-random-distro$/{centos_8} workloads/mon} | 1 |
| pass | 5975244 |
|
2021-03-17 23:52:08 | 2021-03-18 07:37:37 | 2021-03-18 08:03:16 | 0:25:39 | 0:16:34 | 0:09:05 | smithi | master | rhel | 8.3 | rados/multimon/{clusters/9 mon_election/classic msgr-failures/few msgr/async no_pools objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8} tasks/mon_recovery} | 3 |
| pass | 5975245 |
|
2021-03-17 23:52:09 | 2021-03-18 07:40:38 | 2021-03-18 08:16:19 | 0:35:41 | 0:24:29 | 0:11:12 | smithi | master | ubuntu | 20.04 | rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/classic} | 2 |
| pass | 5975246 |
|
2021-03-17 23:52:10 | 2021-03-18 07:40:38 | 2021-03-18 07:59:17 | 0:18:39 | 0:12:20 | 0:06:19 | smithi | master | rhel | 8.3 | rados/singleton-nomsgr/{all/librados_hello_world mon_election/classic rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975247 |
|
2021-03-17 23:52:11 | 2021-03-18 07:40:39 | 2021-03-18 08:03:04 | 0:22:25 | 0:14:03 | 0:08:22 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/few objectstore/bluestore-hybrid rados recovery-overrides/{more-active-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975248 |
|
2021-03-17 23:52:12 | 2021-03-18 07:41:19 | 2021-03-18 08:12:33 | 0:31:14 | 0:21:31 | 0:09:43 | smithi | master | centos | 8.3 | rados/singleton/{all/thrash_cache_writeback_proxy_none mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{centos_8}} | 2 |
| dead | 5975249 |
|
2021-03-17 23:52:13 | 2021-03-18 07:41:29 | 2021-03-18 08:37:23 | 0:55:54 | smithi | master | centos | 8.2 | rados/cephadm/with-work/{0-distro/centos_8.2_kubic_stable fixed-2 mode/packaged mon_election/classic msgr/async-v1only start tasks/rados_python} | 2 | ||
| pass | 5975250 |
|
2021-03-17 23:52:15 | 2021-03-18 07:41:50 | 2021-03-18 08:19:17 | 0:37:27 | 0:27:58 | 0:09:29 | smithi | master | centos | 8.3 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-stupid rados supported-random-distro$/{centos_8} thrashers/morepggrow thrashosds-health workloads/snaps-few-objects-balanced} | 2 |
| pass | 5975251 |
|
2021-03-17 23:52:16 | 2021-03-18 07:42:10 | 2021-03-18 08:00:12 | 0:18:02 | 0:08:50 | 0:09:12 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/connectivity objectstore/bluestore-basic-min-osd-mem-target openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/fio_4M_rand_read} | 1 |
| pass | 5975252 |
|
2021-03-17 23:52:17 | 2021-03-18 07:42:10 | 2021-03-18 08:02:45 | 0:20:35 | 0:09:02 | 0:11:33 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/fastclose objectstore/bluestore-comp-snappy rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/mapgap thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} | 3 |
| pass | 5975253 |
|
2021-03-17 23:52:18 | 2021-03-18 07:43:11 | 2021-03-18 08:28:41 | 0:45:30 | 0:34:16 | 0:11:14 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-comp-snappy rados recovery-overrides/{default} supported-random-distro$/{centos_8} thrashers/morepggrow thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5975254 |
|
2021-03-17 23:52:20 | 2021-03-18 07:43:11 | 2021-03-18 08:23:07 | 0:39:56 | 0:28:41 | 0:11:15 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-snappy rados tasks/mon_recovery validater/valgrind} | 2 |
| pass | 5975255 |
|
2021-03-17 23:52:20 | 2021-03-18 07:44:12 | 2021-03-18 08:09:34 | 0:25:22 | 0:17:37 | 0:07:45 | smithi | master | rhel | 8.3 | rados/monthrash/{ceph clusters/3-mons mon_election/classic msgr-failures/mon-delay msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8} thrashers/sync-many workloads/pool-create-delete} | 2 |
| pass | 5975256 |
|
2021-03-17 23:52:22 | 2021-03-18 07:45:52 | 2021-03-18 08:40:20 | 0:54:28 | 0:39:52 | 0:14:36 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/mimic-v1only backoff/peering ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/few rados thrashers/careful thrashosds-health workloads/snaps-few-objects} | 3 |
| fail | 5975257 |
|
2021-03-17 23:52:23 | 2021-03-18 07:53:05 | 2021-03-18 08:30:14 | 0:37:09 | 0:27:10 | 0:09:59 | smithi | master | centos | 8.2 | rados/cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/classic task/test_orch_cli} | 1 |
Failure Reason:
Test failure: test_cephfs_mirror (tasks.cephadm_cases.test_cli.TestCephadmCLI) |
||||||||||||||
| pass | 5975258 |
|
2021-03-17 23:52:24 | 2021-03-18 07:53:05 | 2021-03-18 08:24:06 | 0:31:01 | 0:24:31 | 0:06:30 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/fastclose rados recovery-overrides/{default} supported-random-distro$/{rhel_8} thrashers/fastread thrashosds-health workloads/ec-small-objects-fast-read-overwrites} | 2 |
| pass | 5975259 |
|
2021-03-17 23:52:25 | 2021-03-18 07:56:09 | 2021-03-18 08:18:38 | 0:22:29 | 0:17:05 | 0:05:24 | smithi | master | rhel | 8.3 | rados/singleton-nomsgr/{all/msgr mon_election/connectivity rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975260 |
|
2021-03-17 23:52:26 | 2021-03-18 07:56:10 | 2021-03-18 08:14:46 | 0:18:36 | 0:07:48 | 0:10:48 | smithi | master | centos | 8.3 | rados/singleton/{all/watch-notify-same-primary mon_election/classic msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975261 |
|
2021-03-17 23:52:27 | 2021-03-18 07:57:40 | 2021-03-18 08:47:01 | 0:49:21 | 0:43:04 | 0:06:17 | smithi | master | rhel | 8.3 | rados/cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/classic start} | 2 |
| pass | 5975262 |
|
2021-03-17 23:52:28 | 2021-03-18 07:58:14 | 2021-03-18 08:17:34 | 0:19:20 | 0:09:27 | 0:09:53 | smithi | master | centos | 8.3 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/filestore-xfs supported-random-distro$/{centos_8} tasks/crash} | 2 |
| pass | 5975263 |
|
2021-03-17 23:52:29 | 2021-03-18 07:58:34 | 2021-03-18 10:36:18 | 2:37:44 | 2:27:50 | 0:09:54 | smithi | master | ubuntu | 18.04 | rados/objectstore/{backends/filestore-idempotent-aio-journal supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975264 |
|
2021-03-17 23:52:30 | 2021-03-18 07:59:24 | 2021-03-18 08:26:39 | 0:27:15 | 0:18:42 | 0:08:33 | smithi | master | centos | 8.3 | rados/valgrind-leaks/{1-start 2-inject-leak/none centos_latest} | 1 |
| pass | 5975265 |
|
2021-03-17 23:52:31 | 2021-03-18 07:59:35 | 2021-03-18 08:29:29 | 0:29:54 | 0:19:04 | 0:10:50 | smithi | master | ubuntu | 18.04 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{ubuntu_latest} tasks/rados_workunit_loadgen_mix} | 2 |
| pass | 5975266 |
|
2021-03-17 23:52:32 | 2021-03-18 08:00:05 | 2021-03-18 09:41:14 | 1:41:09 | 1:30:30 | 0:10:39 | smithi | master | centos | 8.2 | rados/cephadm/thrash/{0-distro/centos_8.2_kubic_stable 1-start 2-thrash 3-tasks/radosbench fixed-2 msgr/async root} | 2 |
| pass | 5975267 |
|
2021-03-17 23:52:33 | 2021-03-18 08:00:06 | 2021-03-18 08:31:50 | 0:31:44 | 0:24:41 | 0:07:03 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-active-recovery} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/filestore-xfs rados supported-random-distro$/{rhel_8} thrashers/none thrashosds-health workloads/snaps-few-objects-localized} | 2 |
| pass | 5975268 |
|
2021-03-17 23:52:34 | 2021-03-18 08:00:56 | 2021-03-18 09:10:39 | 1:09:43 | 1:02:44 | 0:06:59 | smithi | master | rhel | 8.3 | rados/cephadm/with-work/{0-distro/rhel_8.3_kubic_stable fixed-2 mode/root mon_election/connectivity msgr/async-v2only start tasks/rados_api_tests} | 2 |
| pass | 5975269 |
|
2021-03-17 23:52:35 | 2021-03-18 08:00:56 | 2021-03-18 08:30:31 | 0:29:35 | 0:18:04 | 0:11:31 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/classic msgr-failures/few objectstore/bluestore-bitmap rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/minsize_recovery thrashosds-health workloads/ec-small-objects-balanced} | 2 |
| pass | 5975270 |
|
2021-03-17 23:52:36 | 2021-03-18 08:01:17 | 2021-03-18 08:38:08 | 0:36:51 | 0:26:45 | 0:10:06 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/multi-backfill-reject mon_election/classic rados supported-random-distro$/{centos_8}} | 2 |
| pass | 5975271 |
|
2021-03-17 23:52:37 | 2021-03-18 08:01:17 | 2021-03-18 08:16:44 | 0:15:27 | 0:05:44 | 0:09:43 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/admin-socket mon_election/connectivity msgr-failures/none msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975272 |
|
2021-03-17 23:52:38 | 2021-03-18 08:01:17 | 2021-03-18 11:23:57 | 3:22:40 | 3:15:54 | 0:06:46 | smithi | master | rhel | 8.3 | rados/standalone/{mon_election/connectivity supported-random-distro$/{rhel_8} workloads/osd} | 1 |
| fail | 5975273 |
|
2021-03-17 23:52:39 | 2021-03-18 08:02:18 | 2021-03-18 08:26:00 | 0:23:42 | 0:12:50 | 0:10:52 | smithi | master | ubuntu | 20.04 | rados/cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_testing task/test_e2e} | 2 |
Failure Reason:
Command failed (workunit test cephadm/create_iscsi_disks.sh) on smithi071 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && cd -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=3ae49e85764e073e154cc3617a04d1d62c9897ac TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="1" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.1 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.1 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.1/qa/workunits/cephadm/create_iscsi_disks.sh' |
||||||||||||||
| pass | 5975274 |
|
2021-03-17 23:52:40 | 2021-03-18 08:02:38 | 2021-03-18 08:19:57 | 0:17:19 | 0:09:18 | 0:08:01 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/classic objectstore/bluestore-bitmap openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/fio_4M_rand_rw} | 1 |
| pass | 5975275 |
|
2021-03-17 23:52:41 | 2021-03-18 08:02:48 | 2021-03-18 08:28:11 | 0:25:23 | 0:14:38 | 0:10:45 | smithi | master | ubuntu | 18.04 | rados/cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975276 |
|
2021-03-17 23:52:42 | 2021-03-18 08:02:48 | 2021-03-18 08:38:29 | 0:35:41 | 0:25:23 | 0:10:18 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-bitmap rados supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/snaps-few-objects} | 2 |
| pass | 5975277 |
|
2021-03-17 23:52:43 | 2021-03-18 08:02:59 | 2021-03-18 08:20:02 | 0:17:03 | 0:10:57 | 0:06:06 | smithi | master | rhel | 8.3 | rados/singleton/{all/deduptool mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975278 |
|
2021-03-17 23:52:44 | 2021-03-18 08:03:09 | 2021-03-18 08:32:31 | 0:29:22 | 0:19:30 | 0:09:52 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_stable} | 2 |
| pass | 5975279 |
|
2021-03-17 23:52:45 | 2021-03-18 08:03:09 | 2021-03-18 08:29:09 | 0:26:00 | 0:16:08 | 0:09:52 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/osd_stale_reads mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975280 |
|
2021-03-17 23:52:46 | 2021-03-18 08:03:09 | 2021-03-18 08:26:44 | 0:23:35 | 0:14:42 | 0:08:53 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{default} supported-random-distro$/{rhel_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975281 |
|
2021-03-17 23:52:47 | 2021-03-18 08:04:30 | 2021-03-18 08:22:24 | 0:17:54 | 0:06:15 | 0:11:39 | smithi | master | ubuntu | 18.04 | rados/multimon/{clusters/21 mon_election/connectivity msgr-failures/many msgr/async-v1only no_pools objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest} tasks/mon_clock_no_skews} | 3 |
| pass | 5975282 |
|
2021-03-17 23:52:48 | 2021-03-18 08:05:00 | 2021-03-18 08:22:30 | 0:17:30 | 0:07:46 | 0:09:44 | smithi | master | ubuntu | 20.04 | rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/connectivity task/test_adoption} | 1 |
| pass | 5975283 |
|
2021-03-17 23:52:49 | 2021-03-18 08:05:10 | 2021-03-18 08:31:04 | 0:25:54 | 0:15:05 | 0:10:49 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/classic start} | 2 |
| pass | 5975284 |
|
2021-03-17 23:52:50 | 2021-03-18 08:05:41 | 2021-03-18 08:43:29 | 0:37:48 | 0:31:30 | 0:06:18 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-comp-zlib rados recovery-overrides/{default} supported-random-distro$/{rhel_8} thrashers/morepggrow thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} | 3 |
| pass | 5975285 |
|
2021-03-17 23:52:51 | 2021-03-18 08:06:21 | 2021-03-18 08:40:41 | 0:34:20 | 0:26:32 | 0:07:48 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few objectstore/bluestore-comp-zlib rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/none thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5975286 |
|
2021-03-17 23:52:53 | 2021-03-18 08:07:32 | 2021-03-18 08:43:02 | 0:35:30 | 0:22:20 | 0:13:10 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/classic msgr-failures/few msgr/async-v2only objectstore/bluestore-comp-zlib rados tasks/rados_api_tests validater/lockdep} | 2 |
| pass | 5975287 |
|
2021-03-17 23:52:54 | 2021-03-18 08:09:42 | 2021-03-18 08:28:26 | 0:18:44 | 0:12:54 | 0:05:50 | smithi | master | rhel | 8.3 | rados/singleton/{all/divergent_priors mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975288 |
|
2021-03-17 23:52:54 | 2021-03-18 08:09:42 | 2021-03-18 08:31:45 | 0:22:03 | 0:12:58 | 0:09:05 | smithi | master | rhel | 8.3 | rados/monthrash/{ceph clusters/9-mons mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8} thrashers/sync workloads/rados_5925} | 2 |
| pass | 5975289 |
|
2021-03-17 23:52:55 | 2021-03-18 08:12:43 | 2021-03-18 08:47:28 | 0:34:45 | 0:23:27 | 0:11:18 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/mimic backoff/peering_and_degraded ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/osd-delay rados thrashers/default thrashosds-health workloads/test_rbd_api} | 3 |
| pass | 5975290 |
|
2021-03-17 23:52:56 | 2021-03-18 08:13:43 | 2021-03-18 08:32:10 | 0:18:27 | 0:07:28 | 0:10:59 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/pool-access mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975291 |
|
2021-03-17 23:52:57 | 2021-03-18 08:14:54 | 2021-03-18 08:46:21 | 0:31:27 | 0:21:40 | 0:09:47 | smithi | master | centos | 8.3 | rados/cephadm/upgrade/{1-start-distro/1-start-centos_8.3-octopus 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/connectivity} | 2 |
| pass | 5975292 |
|
2021-03-17 23:52:58 | 2021-03-18 08:15:24 | 2021-03-18 08:39:42 | 0:24:18 | 0:13:12 | 0:11:06 | smithi | master | centos | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{centos_8} thrashers/careful thrashosds-health workloads/write_fadvise_dontneed} | 2 |
| pass | 5975293 |
|
2021-03-17 23:52:59 | 2021-03-18 08:16:25 | 2021-03-18 08:56:21 | 0:39:56 | 0:29:17 | 0:10:39 | smithi | master | centos | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{centos_8} tasks/rados_workunit_loadgen_mostlyread} | 2 |
| pass | 5975294 |
|
2021-03-17 23:53:00 | 2021-03-18 08:17:15 | 2021-03-18 08:50:48 | 0:33:33 | 0:22:26 | 0:11:07 | smithi | master | ubuntu | 18.04 | rados/cephadm/with-work/{0-distro/ubuntu_18.04 fixed-2 mode/packaged mon_election/classic msgr/async start tasks/rados_python} | 2 |
| pass | 5975295 |
|
2021-03-17 23:53:01 | 2021-03-18 08:17:15 | 2021-03-18 08:38:29 | 0:21:14 | 0:14:37 | 0:06:37 | smithi | master | rhel | 8.3 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-bitmap supported-random-distro$/{rhel_8} tasks/failover} | 2 |
| pass | 5975296 |
|
2021-03-17 23:53:02 | 2021-03-18 08:17:35 | 2021-03-18 10:19:32 | 2:01:57 | 1:51:45 | 0:10:12 | smithi | master | ubuntu | 18.04 | rados/standalone/{mon_election/classic supported-random-distro$/{ubuntu_latest} workloads/scrub} | 1 |
| pass | 5975297 |
|
2021-03-17 23:53:03 | 2021-03-18 08:18:46 | 2021-03-18 08:40:53 | 0:22:07 | 0:13:04 | 0:09:03 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/connectivity objectstore/bluestore-comp openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/fio_4M_rand_write} | 1 |
| pass | 5975298 |
|
2021-03-17 23:53:05 | 2021-03-18 08:19:26 | 2021-03-18 08:36:58 | 0:17:32 | 0:07:20 | 0:10:12 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/divergent_priors2 mon_election/classic msgr-failures/none msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975299 |
|
2021-03-17 23:53:06 | 2021-03-18 08:19:26 | 2021-03-18 09:03:31 | 0:44:05 | 0:33:20 | 0:10:45 | smithi | master | ubuntu | 20.04 | rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_stable 1-start 2-thrash 3-tasks/small-objects fixed-2 msgr/async-v1only root} | 2 |
| pass | 5975300 |
|
2021-03-17 23:53:06 | 2021-03-18 08:20:07 | 2021-03-18 08:58:31 | 0:38:24 | 0:30:40 | 0:07:44 | smithi | master | rhel | 8.3 | rados/singleton-nomsgr/{all/recovery-unfound-found mon_election/connectivity rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975301 |
|
2021-03-17 23:53:07 | 2021-03-18 08:21:37 | 2021-03-18 10:50:15 | 2:28:38 | 2:20:15 | 0:08:23 | smithi | master | centos | 8.3 | rados/objectstore/{backends/filestore-idempotent supported-random-distro$/{centos_8}} | 1 |
| pass | 5975302 |
|
2021-03-17 23:53:08 | 2021-03-18 08:21:37 | 2021-03-18 08:49:51 | 0:28:14 | 0:16:22 | 0:11:52 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975303 |
|
2021-03-17 23:53:09 | 2021-03-18 08:22:28 | 2021-03-18 08:54:06 | 0:31:38 | 0:20:41 | 0:10:57 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-comp-lz4 rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/ec-small-objects-fast-read} | 2 |
| pass | 5975304 |
|
2021-03-17 23:53:10 | 2021-03-18 08:22:38 | 2021-03-18 08:54:22 | 0:31:44 | 0:21:58 | 0:09:46 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/bluestore-comp-snappy rados supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/admin_socket_objecter_requests} | 2 |
| pass | 5975305 |
|
2021-03-17 23:53:11 | 2021-03-18 09:02:29 | 2019 | smithi | master | rhel | 8.3 | rados/singleton-bluestore/{all/cephtool mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{rhel_8}} | 1 | |||
| pass | 5975306 |
|
2021-03-17 23:53:12 | 2021-03-18 08:23:58 | 2021-03-18 08:55:31 | 0:31:33 | 0:20:27 | 0:11:06 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_20.04_kubic_testing} | 2 |
| pass | 5975307 |
|
2021-03-17 23:53:14 | 2021-03-18 08:24:09 | 2021-03-18 08:55:21 | 0:31:12 | 0:19:17 | 0:11:55 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/fast mon_election/connectivity msgr-failures/few rados recovery-overrides/{more-active-recovery} supported-random-distro$/{ubuntu_latest} thrashers/minsize_recovery thrashosds-health workloads/ec-small-objects-overwrites} | 2 |
| dead | 5975308 |
|
2021-03-17 23:53:15 | 2021-03-18 08:25:29 | 2021-03-18 08:44:10 | 0:18:41 | smithi | master | rhel | 8.3 | rados/singleton/{all/dump-stuck mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{rhel_8}} | 1 | ||
| pass | 5975309 |
|
2021-03-17 23:53:16 | 2021-03-18 08:25:29 | 2021-03-18 08:42:20 | 0:16:51 | 0:08:36 | 0:08:15 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/version-number-sanity mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975310 |
|
2021-03-17 23:53:17 | 2021-03-18 08:26:10 | 2021-03-18 08:51:31 | 0:25:21 | 0:15:38 | 0:09:43 | smithi | master | ubuntu | 20.04 | rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_testing mon_election/classic task/test_cephadm} | 1 |
| pass | 5975311 |
|
2021-03-17 23:53:18 | 2021-03-18 08:26:10 | 2021-03-18 08:48:49 | 0:22:39 | 0:14:27 | 0:08:12 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/fastclose objectstore/bluestore-stupid rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975312 |
|
2021-03-17 23:53:19 | 2021-03-18 08:26:50 | 2021-03-18 08:52:20 | 0:25:30 | 0:15:11 | 0:10:19 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_testing fixed-2 mon_election/classic start} | 2 |
| pass | 5975313 |
|
2021-03-17 23:53:20 | 2021-03-18 08:26:51 | 2021-03-18 08:45:22 | 0:18:31 | 0:07:03 | 0:11:28 | smithi | master | centos | 8.3 | rados/multimon/{clusters/3 mon_election/classic msgr-failures/few msgr/async-v2only no_pools objectstore/bluestore-hybrid rados supported-random-distro$/{centos_8} tasks/mon_clock_with_skews} | 2 |
| pass | 5975314 |
|
2021-03-17 23:53:21 | 2021-03-18 08:28:21 | 2021-03-18 09:08:04 | 0:39:43 | 0:32:41 | 0:07:02 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-active-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/few msgr/async-v1only objectstore/bluestore-comp-zlib rados supported-random-distro$/{rhel_8} thrashers/mapgap thrashosds-health workloads/cache-agent-big} | 2 |
| pass | 5975315 |
|
2021-03-17 23:53:22 | 2021-03-18 08:28:41 | 2021-03-18 09:53:30 | 1:24:49 | 1:19:28 | 0:05:21 | smithi | master | rhel | 8.3 | rados/singleton/{all/ec-lost-unfound mon_election/classic msgr-failures/many msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975316 |
|
2021-03-17 23:53:23 | 2021-03-18 08:28:42 | 2021-03-18 09:15:22 | 0:46:40 | 0:35:09 | 0:11:31 | smithi | master | ubuntu | 20.04 | rados/cephadm/with-work/{0-distro/ubuntu_20.04 fixed-2 mode/root mon_election/connectivity msgr/async-v1only start tasks/rados_api_tests} | 2 |
| pass | 5975317 |
|
2021-03-17 23:53:24 | 2021-03-18 08:29:12 | 2021-03-18 08:50:44 | 0:21:32 | 0:11:09 | 0:10:23 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/classic objectstore/bluestore-low-osd-mem-target openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_4K_rand_read} | 1 |
| pass | 5975318 |
|
2021-03-17 23:53:25 | 2021-03-18 08:29:32 | 2021-03-18 09:36:48 | 1:07:16 | 0:57:11 | 0:10:05 | smithi | master | centos | 8.3 | rados/dashboard/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity random-objectstore$/{bluestore-comp-lz4} supported-random-distro$/{centos_8} tasks/dashboard} | 2 |
| pass | 5975319 |
|
2021-03-17 23:53:27 | 2021-03-18 08:29:43 | 2021-03-18 08:53:47 | 0:24:04 | 0:13:06 | 0:10:58 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/admin_socket_output mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975320 |
|
2021-03-17 23:53:28 | 2021-03-18 08:30:23 | 2021-03-18 08:51:35 | 0:21:12 | 0:14:10 | 0:07:02 | smithi | master | rhel | 8.3 | rados/standalone/{mon_election/connectivity supported-random-distro$/{rhel_8} workloads/crush} | 1 |
| fail | 5975321 |
|
2021-03-17 23:53:29 | 2021-03-18 08:30:33 | 2021-03-18 10:06:39 | 1:36:06 | 1:24:20 | 0:11:46 | smithi | master | ubuntu | 20.04 | rados/upgrade/pacific-x/parallel/{0-start 1-tasks distro1$/{ubuntu_20.04} mon_election/connectivity upgrade-sequence workload/{ec-rados-default rados_api rados_loadgenbig rbd_import_export test_rbd_api test_rbd_python}} | 2 |
Failure Reason:
Command failed (workunit test rbd/test_librbd_python.sh) on smithi133 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && cd -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=pacific TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="0" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.0 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.0 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.0/qa/workunits/rbd/test_librbd_python.sh' |
||||||||||||||
| pass | 5975322 |
|
2021-03-17 23:53:30 | 2021-03-18 08:31:04 | 2021-03-18 08:52:16 | 0:21:12 | 0:14:12 | 0:07:00 | smithi | master | rhel | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-stupid rados supported-random-distro$/{rhel_8} tasks/readwrite} | 2 |
| fail | 5975323 |
|
2021-03-17 23:53:31 | 2021-03-18 08:31:14 | 2021-03-18 09:06:58 | 0:35:44 | 0:24:37 | 0:11:07 | smithi | master | centos | 8.2 | rados/cephadm/dashboard/{0-distro/centos_8.2_kubic_stable task/test_e2e} | 2 |
Failure Reason:
Command failed (workunit test cephadm/test_dashboard_e2e.sh) on smithi180 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && cd -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=3ae49e85764e073e154cc3617a04d1d62c9897ac TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="0" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.0 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.0 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.0/qa/workunits/cephadm/test_dashboard_e2e.sh' |
||||||||||||||
| pass | 5975324 |
|
2021-03-17 23:53:32 | 2021-03-18 08:31:54 | 2021-03-18 08:53:22 | 0:21:28 | 0:14:25 | 0:07:03 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/osd-delay objectstore/bluestore-comp-zstd rados recovery-overrides/{default} supported-random-distro$/{rhel_8} thrashers/pggrow thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} | 3 |
| pass | 5975325 |
|
2021-03-17 23:53:34 | 2021-03-18 08:32:15 | 2021-03-18 09:07:58 | 0:35:43 | 0:25:31 | 0:10:12 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/osd-delay objectstore/bluestore-comp-zstd rados recovery-overrides/{more-async-recovery} supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5975326 |
|
2021-03-17 23:53:35 | 2021-03-18 11:08:23 | 8484 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-comp-zstd rados tasks/rados_cls_all validater/valgrind} | 2 | |||
| pass | 5975327 |
|
2021-03-17 23:53:36 | 2021-03-18 08:37:06 | 2021-03-18 09:11:24 | 0:34:18 | 0:24:02 | 0:10:16 | smithi | master | ubuntu | 18.04 | rados/monthrash/{ceph clusters/3-mons mon_election/classic msgr-failures/mon-delay msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest} thrashers/force-sync-many workloads/rados_api_tests} | 2 |
| pass | 5975328 |
|
2021-03-17 23:53:37 | 2021-03-18 08:37:26 | 2021-03-18 09:28:04 | 0:50:38 | 0:39:36 | 0:11:02 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/nautilus-v1only backoff/normal ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/fastclose rados thrashers/mapgap thrashosds-health workloads/cache-snaps} | 3 |
| dead | 5975329 |
|
2021-03-17 23:53:39 | 2021-03-18 08:38:37 | 2021-03-18 09:00:22 | 0:21:45 | smithi | master | ubuntu | 20.04 | rados/cephadm/orchestrator_cli/{2-node-mgr orchestrator_cli random-distro$/{ubuntu_20.04}} | 2 | ||
| pass | 5975330 |
|
2021-03-17 23:53:40 | 2021-03-18 08:38:37 | 2021-03-18 08:55:03 | 0:16:26 | 0:10:13 | 0:06:13 | smithi | master | rhel | 8.3 | rados/singleton/{all/erasure-code-nonregression mon_election/connectivity msgr-failures/none msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975331 |
|
2021-03-17 23:53:41 | 2021-03-18 08:38:37 | 2021-03-18 09:01:05 | 0:22:28 | 0:14:26 | 0:08:02 | smithi | master | rhel | 8.3 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-comp-lz4 supported-random-distro$/{rhel_8} tasks/insights} | 2 |
| pass | 5975332 |
|
2021-03-17 23:53:42 | 2021-03-18 08:39:48 | 2021-03-18 09:26:21 | 0:46:33 | 0:35:58 | 0:10:35 | smithi | master | centos | 8.2 | rados/cephadm/smoke/{distro/centos_8.2_kubic_stable fixed-2 mon_election/classic start} | 2 |
| pass | 5975333 |
|
2021-03-17 23:53:43 | 2021-03-18 08:40:28 | 2021-03-18 09:03:55 | 0:23:27 | 0:14:27 | 0:09:00 | smithi | master | centos | 8.3 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-comp-zstd rados supported-random-distro$/{centos_8} thrashers/morepggrow thrashosds-health workloads/cache-agent-small} | 2 |
| pass | 5975334 |
|
2021-03-17 23:53:45 | 2021-03-18 08:40:48 | 2021-03-18 08:58:06 | 0:17:18 | 0:07:21 | 0:09:57 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/balancer mon_election/classic rados supported-random-distro$/{ubuntu_latest}} | 1 |
| fail | 5975335 |
|
2021-03-17 23:53:46 | 2021-03-18 08:40:49 | 2021-03-18 10:17:18 | 1:36:29 | 1:24:03 | 0:12:26 | smithi | master | centos | 8.2 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/centos_8.2_kubic_stable} | 2 |
Failure Reason:
SELinux denials found on ubuntu@smithi005.front.sepia.ceph.com: ['type=AVC msg=audit(1616058369.064:7027): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.119:8309): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.435:8804): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058386.434:7116): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.781:7001): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.433:7320): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.431:8310): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.568:7419): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.433:8162): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.432:7102): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058433.954:7238): avc: denied { write } for pid=25074 comm="safe_timer" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.121:7343): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.727:7729): avc: denied { open } for pid=50647 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6893): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8517): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7304): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.432:8794): avc: denied { read } for pid=34076 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.434:6943): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058592.988:8072): avc: denied { open } for pid=44911 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058722.121:8782): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.940:7010): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8663): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.434:8869): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.735:6661): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.451:8806): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6888): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.758:6696): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8673): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7647): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.188:7574): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.437:8037): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058648.649:8412): avc: denied { open } for pid=25449 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.197:8299): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.119:8291): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058575.121:7897): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058438.956:7366): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058451.964:7390): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.434:7771): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.845:7685): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.431:8427): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.345:8841): avc: denied { open } for pid=44911 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8024): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.432:8160): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6728): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058523.930:7735): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7630): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8152): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7104): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7773): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058509.120:7695): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058516.434:7699): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.064:6982): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.408:7353): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6919): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058508.515:7691): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058516.435:7701): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.735:8041): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6748): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.433:6757): avc: denied { read } for pid=34076 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058657.139:8450): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058288.661:6549): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058304.558:6675): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6632): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8705): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8662): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.661:6548): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.525:7721): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058606.433:8161): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.964:7391): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.513:7661): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.431:7422): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.988:8399): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.431:7422): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8857): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.424:8151): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058299.121:6670): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058435.456:7284): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8889): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.525:7719): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058368.121:7021): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.432:8673): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.345:8841): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.797:7907): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7760): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.431:8312): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8428): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.090:8832): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.432:7649): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.557:7000): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8435): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.432:7647): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7111): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.038:7711): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8702): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6743): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.122:7082): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.968:7730): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.735:6667): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[289050]" dev="sockfs" ino=289050 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058607.982:8169): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058578.025:8002): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.734:8364): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.930:8504): avc: denied { read } for pid=98164 comm="pgrep" name="status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.434:6938): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058433.953:7237): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.244:8404): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058660.046:8456): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.735:8886): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[358284]" dev="sockfs" ino=358284 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.315:6905): avc: denied { open } for pid=44911 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8534): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.649:8414): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6659): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.121:7081): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.432:7433): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8861): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7672): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[324188]" dev="sockfs" ino=324188 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.024:7244): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.735:7130): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.431:8421): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8855): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7429): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7106): avc: denied { read } for pid=34076 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.435:8696): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058666.432:8513): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058574.886:7890): avc: denied { read } for pid=41304 comm="msgr-worker-0" path="socket:[194617]" dev="sockfs" ino=194617 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.078:8830): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8505): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7323): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.450:7329): avc: denied { write } for pid=25074 comm="ms_dispatch" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7898): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8376): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.121:8494): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8864): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.965:7688): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.433:8029): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058719.007:8773): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.432:6749): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { write open } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="sda1" ino=1970745 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.433:7439): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.258:8839): avc: denied { append } for pid=56119 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.735:7675): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.321:8405): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.216:7901): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.146:7089): avc: denied { read } for pid=41304 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058379.125:7056): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.839:6676): avc: denied { getattr } for pid=82607 comm="pgrep" path="/proc/25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.781:7003): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.984:8085): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058737.090:8894): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.735:7784): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[329814]" dev="sockfs" ino=329814 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7896): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7305): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.929:6724): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.021:8486): avc: denied { search } for pid=25449 comm="mgr-fin" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.006:7243): avc: denied { search } for pid=25449 comm="mgr-fin" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8106): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.431:7424): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8507): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.735:7970): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058311.872:6712): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8520): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.661:8415): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.821:7601): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8679): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.121:8003): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.881:8463): avc: denied { open } for pid=41304 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058433.953:7236): avc: denied { append } for pid=25074 comm="log" path="/var/log/ceph/ceph-mon.smithi005.log" dev="sda1" ino=396130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7636): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.735:7783): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=36664 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6574): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1574985 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7311): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8717): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.965:7689): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8490): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.992:8711): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8717): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058592.979:8067): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.432:8435): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8026): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.724:8395): avc: denied { write } for pid=42796 comm="prometheus" path="pipe:[181968]" dev="pipefs" ino=181968 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.490:6576): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8153): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.649:8412): avc: denied { read } for pid=25449 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.121:7247): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7307): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { add_name } for pid=40714 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058735.258:8836): avc: denied { write } for pid=77255 comm="msgr-worker-1" laddr=172.21.15.5 lport=33372 faddr=172.21.15.5 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7610): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.452:7331): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8678): avc: denied { read } for pid=34076 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.434:8871): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058508.515:7691): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.784:7009): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8025): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.443:7448): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.735:7333): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.064:6982): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.435:6766): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058377.942:7052): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.431:7630): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.122:8905): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.964:7391): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058524.122:7745): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1574982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.881:8463): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { search } for pid=25449 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058288.661:6548): avc: denied { open } for pid=25449 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.604:7069): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8663): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8901): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.268:8014): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.442:7777): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.433:8033): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7105): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.345:8842): avc: denied { open } for pid=44911 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6888): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058523.930:7734): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058311.695:6710): avc: denied { read } for pid=41304 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6916): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.435:6767): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058726.432:8796): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058719.007:8773): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.432:7307): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058690.300:8550): avc: denied { write } for pid=40714 comm="grafana-server" path="socket:[342056]" dev="sockfs" ino=342056 scontext=system_u:system_r:spc_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616058577.719:7990): avc: denied { open } for pid=50647 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.434:6941): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.002:8478): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.952:7095): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.735:7128): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.121:8495): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.953:7360): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8688): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8850): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058446.432:7369): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.734:8362): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7036): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7440): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058369.002:7025): avc: denied { read } for pid=25449 comm="mgr-fin" name="localtime" dev="overlay" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6745): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.268:8014): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058438.956:7364): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.432:7301): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.433:6932): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.504:7417): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.434:6652): avc: denied { fork } for pid=34076 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8701): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058438.956:7365): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7754): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7896): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058288.661:6548): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.433:7954): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8673): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6571): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058304.426:6674): avc: denied { write } for pid=25074 comm="msgr-worker-2" laddr=172.21.15.5 lport=3300 faddr=172.21.15.143 fport=38660 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.977:7997): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058609.955:8173): avc: denied { read } for pid=56119 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.434:6650): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.026:7908): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058288.941:6561): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058311.555:6705): avc: denied { read } for pid=25449 comm="msgr-worker-1" path="socket:[232011]" dev="sockfs" ino=232011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058289.329:6567): avc: denied { open } for pid=41304 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.735:7128): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.006:7243): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8674): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.434:6686): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.778:6977): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.735:7129): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.036:7581): avc: denied { write } for pid=25074 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.078:8829): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.833:7682): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.661:6548): avc: denied { read } for pid=25449 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.026:7910): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058594.016:8092): avc: denied { read } for pid=25449 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.408:7300): avc: denied { search } for pid=44911 comm="safe_timer" name="diff" dev="sda1" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.121:7079): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.735:7968): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8109): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/class/hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.450:6742): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.968:7733): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.349:8302): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.734:8131): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[339834]" dev="sockfs" ino=339834 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7606): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.215:8082): avc: denied { open } for pid=44911 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7037): avc: denied { read } for pid=34076 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.984:8086): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.191:6903): avc: denied { append } for pid=41304 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058719.121:8779): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.121:6888): avc: denied { search } for pid=40714 comm="grafana-server" name="dashboards" dev="sda1" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058376.432:7033): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058661.000:8457): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058311.570:6707): avc: denied { write } for pid=56119 comm="tp_osd_tp" path="pipe:[215792]" dev="pipefs" ino=215792 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6656): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8898): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8505): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.064:6980): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8855): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7309): avc: denied { read } for pid=34076 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.432:8793): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7445): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8514): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.697:6617): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.782:6719): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.855:6912): avc: denied { getattr } for pid=85251 comm="pgrep" path="/proc/25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7118): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.821:7601): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.734:7458): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[315844]" dev="sockfs" ino=315844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.436:8876): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7032): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.942:7072): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8113): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7032): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7040): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.839:6677): avc: denied { search } for pid=82607 comm="pgrep" name="25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058662.881:8463): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8904): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058379.113:7055): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058446.434:7373): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8510): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.432:8439): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.432:7653): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058456.432:7428): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058451.915:7387): avc: denied { read } for pid=44911 comm="msgr-worker-2" path="pipe:[190581]" dev="pipefs" ino=190581 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.026:7910): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058290.121:6573): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.002:8476): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058605.915:8148): avc: denied { search } for pid=95140 comm="pgrep" name="25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.433:7952): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7646): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7894): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058730.993:8823): avc: denied { write } for pid=25449 comm="safe_timer" path="pipe:[142689]" dev="pipefs" ino=142689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8512): avc: denied { read } for pid=34076 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.008:8655): avc: denied { read } for pid=25449 comm="msgr-worker-1" path="pipe:[142689]" dev="pipefs" ino=142689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6922): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.002:8478): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.434:8528): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8887): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.431:7638): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.492:7415): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058590.121:8053): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.735:7969): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8471): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.432:8120): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6926): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.434:8872): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.604:7069): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7609): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.735:8038): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7938): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7434): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.121:7743): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.424:8410): avc: denied { read } for pid=25425 comm="conmon" path="pipe:[122591]" dev="pipefs" ino=122591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.735:6668): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[286966]" dev="sockfs" ino=286966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.119:8291): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058376.433:7044): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.433:6643): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.009:7285): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.435:8335): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.432:7937): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058449.120:7379): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.002:8478): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.433:8327): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.432:7751): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.735:7781): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.736:6976): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.433:6761): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6974): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[300290]" dev="sockfs" ino=300290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.364:8095): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8495): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.148:8054): avc: denied { read } for pid=41304 comm="msgr-worker-0" path="socket:[231472]" dev="sockfs" ino=231472 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7324): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058664.021:8486): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8325): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058719.121:8779): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8119): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058735.258:8838): avc: denied { read } for pid=41304 comm="msgr-worker-2" path="socket:[267856]" dev="sockfs" ino=267856 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.434:8867): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.078:8830): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6573): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.137:7087): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7628): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7632): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.433:6930): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.432:8852): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7632): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058314.120:6738): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.064:6982): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.980:8070): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7773): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.434:7048): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.431:7632): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.648:8355): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.964:7389): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.734:8128): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.992:8713): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7766): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058726.432:8791): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.781:7003): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.433:7311): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8074): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.845:7685): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.121:8495): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058293.121:6625): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.838:8371): avc: denied { write } for pid=44911 comm="msgr-worker-1" laddr=172.21.15.5 lport=6814 faddr=172.21.15.143 fport=57258 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6729): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058305.839:6677): avc: denied { open } for pid=82607 comm="pgrep" path="/proc/25049/status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.953:7359): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.952:7094): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058606.431:8156): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.839:6679): avc: denied { read } for pid=82607 comm="pgrep" name="status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8896): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8315): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7108): avc: denied { read } for pid=34076 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.434:8525): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.735:8879): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058585.198:8018): avc: denied { open } for pid=42796 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7033): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.256:8012): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8079): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8701): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8707): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[352743]" dev="sockfs" ino=352743 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058600.057:8135): avc: denied { unlink } for pid=40714 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970745 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7305): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.524:7718): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.492:7414): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.374:7982): avc: denied { append } for pid=56119 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.435:7125): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8377): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8687): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.120:7610): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7939): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.244:7932): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058449.120:7380): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058382.943:7076): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.734:6688): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7758): avc: denied { read } for pid=34076 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8080): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.121:8077): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.734:8359): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8514): avc: denied { read } for pid=34076 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.959:7412): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.735:7340): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[309846]" dev="sockfs" ino=309846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8658): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6890): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058605.914:8146): avc: denied { search } for pid=95140 comm="pgrep" name="25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.433:6936): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8023): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.734:7457): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=58177 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.121:7739): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.433:8861): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.941:6559): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058645.349:8302): avc: denied { read } for pid=44911 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.433:6935): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6638): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.433:8682): avc: denied { read } for pid=34076 comm="node_exporter" name="stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8117): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7409): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.002:8476): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.929:6723): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.434:8526): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7772): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8509): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.727:7729): avc: denied { read } for pid=50647 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.434:7961): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6740): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8320): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { search } for pid=25449 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.432:7310): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=34824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.433:8028): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.735:8879): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058647.988:8400): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.321:8405): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.433:8329): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7041): avc: denied { read } for pid=34076 comm="node_exporter" name="stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8689): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.256:8012): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6727): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.735:7336): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8889): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058311.571:6708): avc: denied { read } for pid=56119 comm="msgr-worker-2" path="pipe:[215792]" dev="pipefs" ino=215792 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.258:8837): avc: denied { write } for pid=77255 comm="msgr-worker-2" laddr=172.21.15.5 lport=43534 faddr=172.21.15.143 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058727.063:8817): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7427): avc: denied { read } for pid=34076 comm="node_exporter" name="xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058304.426:6673): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="socket:[160653]" dev="sockfs" ino=160653 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.432:7101): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.433:8328): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.119:8290): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.432:8507): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8474): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058516.434:7700): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.992:8714): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058590.121:8052): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.512:7356): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.117:8285): avc: denied { write } for pid=25074 comm="safe_timer" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.145:7088): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6888): avc: denied { search } for pid=40714 comm="grafana-server" name="diff" dev="sda1" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.121:7342): avc: denied { search } for pid=40714 comm="grafana-server" name="dashboards" dev="sda1" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058600.246:8137): avc: denied { setopt } for pid=40714 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7755): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6654): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7428): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.121:8490): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058382.943:7075): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.433:8441): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.119:8291): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058719.121:8780): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058314.120:6735): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.432:6755): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7650): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7313): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8889): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.433:6647): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7948): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.352:8093): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8692): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8903): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.122:7084): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1574978 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.256:8012): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058723.065:8784): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058376.433:7039): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058610.462:8176): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.121:7077): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058369.064:7026): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8665): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058433.954:7241): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="socket:[160653]" dev="sockfs" ino=160653 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.005:8789): avc: denied { write } for pid=77255 comm="msgr-worker-0" laddr=172.21.15.5 lport=57180 faddr=172.21.15.143 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8517): avc: denied { read } for pid=34076 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.749:6553): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.941:6561): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.432:6922): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8377): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.433:6648): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.433:6758): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7940): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6729): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8510): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058376.432:7038): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7435): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.137:7085): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.121:8004): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058728.121:8822): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.121:7739): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058311.555:6706): avc: denied { append } for pid=25449 comm="log" path="/var/log/ceph/ceph-mgr.smithi005.givcyh.log" dev="sda1" ino=396136 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058600.057:8135): avc: denied { remove_name } for pid=40714 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970745 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.431:7629): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.968:7731): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8472): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8102): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7637): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058725.944:8788): avc: denied { read } for pid=101166 comm="pgrep" name="status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8154): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7307): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.433:6649): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.940:7011): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8097): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7114): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8682): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6968): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.035:7567): avc: denied { append } for pid=25074 comm="log" path="/var/log/ceph/ceph-mon.smithi005.log" dev="sda1" ino=396130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.965:7689): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058574.886:7888): avc: denied { read } for pid=44911 comm="msgr-worker-1" path="pipe:[190580]" dev="pipefs" ino=190580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.735:6662): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8535): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058435.408:7266): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.433:6931): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.931:6702): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.406:7626): avc: denied { read } for pid=44911 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.021:8486): avc: denied { search } for pid=25449 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.434:7955): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7644): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058438.956:7366): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058293.650:6627): avc: denied { open } for pid=56119 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7654): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6636): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8863): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8100): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8520): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058727.041:8816): avc: denied { search } for pid=25449 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058607.982:8169): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058728.121:8821): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058299.121:6671): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.122:7084): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1574978 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058719.005:8771): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.123:7252): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058605.915:8148): avc: denied { open } for pid=95140 comm="pgrep" path="/proc/25074/status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058311.695:6711): avc: denied { read } for pid=41304 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.735:7971): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=52369 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.433:7951): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058725.944:8786): avc: denied { search } for pid=101166 comm="pgrep" name="25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.149:7090): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.268:8015): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.435:8332): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.977:7997): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.432:6756): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.120:6693): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.434:8867): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.431:8312): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.942:8064): avc: denied { write } for pid=56119 comm="tp_osd_tp" path="pipe:[215791]" dev="pipefs" ino=215791 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7637): avc: denied { read } for pid=34076 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.734:8127): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.942:7073): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.650:7092): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8319): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058738.005:8909): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8074): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.542:7726): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6571): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.729:8497): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.927:6620): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.735:7967): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058648.243:8403): avc: denied { read } for pid=25449 comm="mgr-fin" name="lib" dev="overlay" ino=394929 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.661:6550): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8376): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058516.434:7700): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8899): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6636): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.661:8415): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058660.046:8456): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.433:7951): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.431:6684): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.406:7626): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.992:8712): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8432): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.930:7735): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8542): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[351937]" dev="sockfs" ino=351937 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7945): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6729): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.435:6768): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.957:7259): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.735:7333): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.977:7998): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058608.450:8171): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058719.007:8773): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.434:7116): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.121:8378): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058726.432:8797): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7018): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7123): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8103): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.432:8792): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058658.997:8453): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.930:8502): avc: denied { search } for pid=98164 comm="pgrep" name="25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058725.944:8786): avc: denied { read } for pid=101166 comm="pgrep" name="status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.454:6769): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058449.120:7381): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.121:7739): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7772): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.673:6552): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058521.774:7706): avc: denied { write } for pid=50647 comm="msgr-worker-1" laddr=172.21.15.5 lport=6822 faddr=172.21.15.143 fport=46258 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8496): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.435:7776): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.433:6643): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7631): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7769): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6888): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058718.001:8745): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.977:7997): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7642): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.433:6757): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058455.924:7421): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.432:8795): avc: denied { read } for pid=34076 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.431:8422): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.016:6914): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8519): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8717): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058299.121:6672): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.979:8067): avc: denied { search } for pid=25074 comm="safe_timer" name="diff" dev="sda1" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058577.719:7990): avc: denied { read } for pid=50647 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6922): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7895): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8318): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.734:8449): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.120:7397): avc: denied { search } for pid=40714 comm="grafana-server" name="dashboards" dev="sda1" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058377.942:7052): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058728.003:8819): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058435.396:7264): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8671): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8853): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058291.938:6599): avc: denied { append } for pid=41304 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.006:7243): avc: denied { search } for pid=25449 comm="mgr-fin" name="diff" dev="sda1" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.952:7095): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058578.268:8014): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8472): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.885:7358): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.509:6545): avc: denied { append } for pid=56119 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058467.021:7463): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8116): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.968:7730): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058290.121:6573): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058299.121:6672): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6925): avc: denied { read } for pid=34076 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8439): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.453:7126): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.747:8489): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.440:7656): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.984:8087): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.433:7950): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058505.833:7604): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058509.120:7695): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.191:6900): avc: denied { write } for pid=77255 comm="msgr-worker-2" laddr=172.21.15.5 lport=43534 faddr=172.21.15.143 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058377.112:7050): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058509.120:7693): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8516): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.734:7450): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.243:8403): avc: denied { search } for pid=25449 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058719.005:8771): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.435:6766): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.432:7103): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8904): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.121:7402): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.735:8043): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[337457]" dev="sockfs" ino=337457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.433:8798): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.697:6618): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058293.121:6624): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.432:8434): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6920): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.434:8443): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.781:7003): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.315:6904): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.946:7687): avc: denied { read } for pid=56119 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.940:6558): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058311.695:6710): avc: denied { search } for pid=41304 comm="safe_timer" name="diff" dev="sda1" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.006:7243): avc: denied { read } for pid=25449 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.984:8087): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.432:7303): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058465.198:7462): avc: denied { getattr } for pid=42796 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.957:7259): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058607.111:8168): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.492:7415): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.434:6763): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.955:8470): avc: denied { write } for pid=41304 comm="msgr-worker-1" laddr=172.21.15.5 lport=6802 faddr=172.21.15.143 fport=47906 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7940): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8117): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058651.548:8418): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.927:6621): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.735:8807): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.408:7354): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.735:7967): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8428): avc: denied { read } for pid=34076 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.431:6685): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.837:8370): avc: denied { read } for pid=41304 comm="msgr-worker-0" path="socket:[235542]" dev="sockfs" ino=235542 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.095:6734): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.452:8698): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.431:7424): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.881:8464): avc: denied { append } for pid=41304 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8903): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6754): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.035:7570): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="socket:[160653]" dev="sockfs" ino=160653 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.121:7247): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.434:6942): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058646.432:8321): avc: denied { read } for pid=34076 comm="node_exporter" name="eno1" dev="sysfs" ino=34629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.839:6677): avc: denied { read } for pid=82607 comm="pgrep" name="status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058594.352:8093): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.119:8289): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.433:6646): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.649:8413): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8895): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.453:6945): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.954:8467): avc: denied { write } for pid=56119 comm="tp_osd_tp" path="pipe:[215791]" dev="pipefs" ino=215791 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.069:8657): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.433:8329): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.408:7353): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.238:6609): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058292.238:6609): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058600.254:8142): avc: denied { read } for pid=40714 comm="grafana-server" path="socket:[342056]" dev="sockfs" ino=342056 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7898): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.434:7121): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058664.735:8487): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.509:6542): avc: denied { write } for pid=74258 comm="msgr-worker-1" laddr=172.21.15.5 lport=33212 faddr=172.21.15.5 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7047): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058585.198:8018): avc: denied { read } for pid=42796 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8373): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.953:7363): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058587.975:8045): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6740): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6929): avc: denied { read } for pid=34076 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8316): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.930:8502): avc: denied { read } for pid=98164 comm="pgrep" name="status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.432:8113): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7756): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.116:7060): avc: denied { append } for pid=50647 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396209 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.959:7388): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { create } for pid=40714 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.735:7339): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=40077 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058649.860:8416): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8074): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8659): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7756): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6729): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.121:7077): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.433:7317): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.968:7731): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7945): avc: denied { read } for pid=34076 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8851): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7651): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.432:7102): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.435:8803): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7315): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.735:8878): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.117:8286): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.433:6930): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.432:6933): avc: denied { read } for pid=34076 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.149:7090): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058725.944:8787): avc: denied { getattr } for pid=101166 comm="pgrep" path="/proc/25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.453:8336): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.433:8686): avc: denied { read } for pid=34076 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.799:8398): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6923): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.964:7391): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.734:8448): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7114): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.513:7661): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058664.021:8486): avc: denied { search } for pid=25449 comm="mgr-fin" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.432:6747): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8110): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8471): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.984:8087): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8687): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.121:8665): avc: denied { read } for pid=40714 comm="grafana-server" name="pool-overview.json" dev="sda1" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.121:7078): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058578.256:8011): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058448.044:7375): avc: denied { open } for pid=50647 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058727.071:8818): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.953:7359): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.121:7248): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.734:7455): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6655): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058605.915:8147): avc: denied { getattr } for pid=95140 comm="pgrep" path="/proc/25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7113): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7758): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7301): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058718.273:8763): avc: denied { open } for pid=50647 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.433:7954): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.509:6540): avc: denied { write } for pid=74258 comm="ceph_timer" path="pipe:[265010]" dev="pipefs" ino=265010 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.959:7413): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7409): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6633): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.026:7908): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058728.121:8822): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.191:6899): avc: denied { write } for pid=77255 comm="msgr-worker-1" laddr=172.21.15.5 lport=33372 faddr=172.21.15.5 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7674): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[321920]" dev="sockfs" ino=321920 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.525:7721): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.648:8358): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.833:7683): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.735:7134): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[293855]" dev="sockfs" ino=293855 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.120:7400): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.984:8087): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058311.695:6710): avc: denied { open } for pid=41304 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.435:8873): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.433:8799): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8097): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7652): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.746:8059): avc: denied { read } for pid=25449 comm="msgr-worker-2" path="socket:[271523]" dev="sockfs" ino=271523 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8700): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8517): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.953:7360): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.525:7721): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.433:6760): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.434:7962): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.735:8809): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6635): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.435:8873): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8316): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.434:6687): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058452.121:7402): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.434:7119): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.123:7253): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1574984 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.839:6679): avc: denied { open } for pid=82607 comm="pgrep" path="/proc/25074/status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.256:7935): avc: denied { search } for pid=25449 comm="safe_timer" name="diff" dev="sda1" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.432:7944): avc: denied { read } for pid=34076 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.734:7452): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.188:7574): avc: denied { read } for pid=41304 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.349:8303): avc: denied { open } for pid=44911 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7605): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7651): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.734:8124): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.433:8861): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7667): avc: denied { getattr } for pid=42796 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=179846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.931:6700): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.432:8430): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6727): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058575.121:7893): avc: denied { search } for pid=40714 comm="grafana-server" name="dashboards" dev="sda1" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.735:7334): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.980:8071): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6895): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.122:7250): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7644): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.942:7738): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058718.993:8770): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.747:8489): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7893): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.929:6723): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.839:6679): avc: denied { search } for pid=82607 comm="pgrep" name="25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.929:6723): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.120:7608): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.965:7690): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { search } for pid=25449 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058369.944:7028): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.120:7400): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.542:7726): avc: denied { read } for pid=56119 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058449.120:7378): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6751): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.724:8396): avc: denied { write } for pid=42796 comm="prometheus" path="pipe:[181968]" dev="pipefs" ino=181968 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.436:8697): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.120:7401): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058726.432:8792): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7408): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.833:7683): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.781:7003): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.433:7322): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6569): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.244:7933): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.431:8313): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8373): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.965:7689): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7942): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7035): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.117:8287): avc: denied { write } for pid=25074 comm="msgr-worker-2" laddr=172.21.15.5 lport=3300 faddr=172.21.15.143 fport=38660 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058718.273:8763): avc: denied { read } for pid=50647 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8022): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058738.005:8908): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.078:8830): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058516.432:7698): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058715.878:8651): avc: denied { append } for pid=50647 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396209 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.927:6620): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.758:6696): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6735): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.881:8465): avc: denied { open } for pid=41304 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.432:8794): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.120:7397): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058718.001:8747): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8434): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7425): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8899): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058647.121:8380): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.431:8424): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7124): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.432:8319): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8508): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7115): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058728.121:8821): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.434:8527): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058717.634:8742): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.121:7247): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.434:8529): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.345:8842): avc: denied { read } for pid=44911 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.725:7357): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.256:7935): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.434:6764): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.964:7389): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.121:8078): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058378.758:7053): avc: denied { read } for pid=44911 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8703): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.941:6559): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.434:8524): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.953:7361): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.121:7080): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.952:7095): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.432:8026): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7444): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.953:7360): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8509): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.957:7259): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.256:7935): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7411): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058574.886:7885): avc: denied { read } for pid=44911 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8691): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058509.120:7696): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8355): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.238:7575): avc: denied { open } for pid=41304 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.024:7244): avc: denied { read } for pid=56119 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.859:6554): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.724:8397): avc: denied { read } for pid=42796 comm="prometheus" path="pipe:[181968]" dev="pipefs" ino=181968 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.123:7252): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058290.121:6570): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7114): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058574.886:7887): avc: denied { write } for pid=44911 comm="osd_srv_heartbt" path="pipe:[190580]" dev="pipefs" ino=190580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.947:6680): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058645.197:8300): avc: denied { getattr } for pid=42796 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.839:6678): avc: denied { getattr } for pid=82607 comm="pgrep" path="/proc/25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7042): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058590.121:8051): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.432:7303): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.734:8360): avc: denied { getattr } for pid=42796 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=179846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.649:8413): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.929:6723): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7113): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058465.198:7461): avc: denied { getattr } for pid=42796 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.122:7744): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.431:8422): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.408:7351): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.927:6620): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.435:8802): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8532): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8109): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon" dev="sysfs" ino=20770 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058525.198:7746): avc: denied { read } for pid=42796 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.121:8379): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7441): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8081): avc: denied { read } for pid=40714 comm="grafana-server" name="radosgw-detail.json" dev="sda1" ino=1574982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058608.450:8171): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.661:8415): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.434:7959): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058736.071:8848): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8079): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.431:8104): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.734:8126): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7312): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0/uevent" dev="sysfs" ino=34825 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.942:7072): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.435:6653): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7308): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.121:7742): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6888): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6918): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.121:8378): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.434:6940): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6749): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.881:8463): avc: denied { read } for pid=41304 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7313): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6637): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6568): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.434:8525): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.120:7397): avc: denied { search } for pid=40714 comm="grafana-server" name="diff" dev="sda1" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.432:7310): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8355): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8079): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7322): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.433:8683): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.895:6978): avc: denied { open } for pid=56119 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8658): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.957:7257): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.408:7353): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.121:8458): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1574986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8510): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058733.068:8826): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.121:8663): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058307.928:6691): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.941:6561): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.433:8031): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058525.198:7748): avc: denied { getattr } for pid=42796 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8899): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.984:8087): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7767): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.046:7892): avc: denied { write } for pid=25074 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6967): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.734:8367): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[347767]" dev="sockfs" ino=347767 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6894): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.957:7259): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058290.121:6568): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7020): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.432:7643): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058660.046:8455): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.121:8493): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.433:6931): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8536): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.123:7252): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058289.329:6567): avc: denied { read } for pid=41304 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8159): avc: denied { read } for pid=34076 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.237:6608): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.315:6905): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.315:6905): avc: denied { read } for pid=44911 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7636): avc: denied { read } for pid=34076 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6770): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7605): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.735:7972): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[335202]" dev="sockfs" ino=335202 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8323): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.833:7684): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8689): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6933): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058585.198:8019): avc: denied { getattr } for pid=42796 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.339:8083): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.661:6549): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.433:8441): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.735:8487): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8438): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.244:7934): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.435:8873): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.492:7416): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058369.944:7028): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.432:8852): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7640): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.941:6561): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.992:8711): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058607.060:8166): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7760): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.988:8399): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058647.988:8402): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.432:6749): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6572): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.735:7131): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.435:8334): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058664.747:8489): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.120:7605): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.539:7599): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.433:6930): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7753): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.735:6666): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=58046 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058574.886:7885): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.434:6937): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8683): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.006:7243): avc: denied { read } for pid=25449 comm="mgr-fin" name="localtime" dev="overlay" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.434:8445): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058383.952:7095): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.433:7321): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.437:8036): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058293.121:6624): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7650): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.735:8884): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=48734 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7019): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8112): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8103): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6755): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8533): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7113): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058607.060:8167): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058648.424:8409): avc: denied { use } for pid=25449 comm="log" path="pipe:[122591]" dev="pipefs" ino=122591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.845:7685): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6746): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7316): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.942:7073): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7320): avc: denied { read } for pid=34076 comm="node_exporter" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.191:6898): avc: denied { read } for pid=77255 comm="msgr-worker-1" path="pipe:[267848]" dev="pipefs" ino=267848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.513:7661): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058523.930:7736): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.799:8398): avc: denied { search } for pid=41304 comm="safe_timer" name="diff" dev="sda1" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { search } for pid=25449 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058292.697:6617): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058433.954:7239): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.992:8710): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.968:7731): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7667): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.476:8057): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.818:7071): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.424:8149): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.734:8361): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6776): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=39060 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058311.695:6710): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058449.120:7379): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.121:8658): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.121:6893): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7110): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7438): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.735:8807): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.432:8676): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.243:8403): avc: denied { search } for pid=25449 comm="mgr-fin" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8862): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.735:8808): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.435:8331): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.435:7963): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.757:6689): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.432:8022): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.118:8288): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="socket:[160653]" dev="sockfs" ino=160653 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.021:8486): avc: denied { getattr } for pid=25449 comm="mgr-fin" name="UTC" dev="sda1" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058606.431:8155): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6637): avc: denied { read } for pid=34076 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.432:7752): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.734:8365): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=60805 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8105): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.432:8435): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058733.068:8827): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058578.025:8002): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058504.821:7580): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.735:8042): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=50270 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8861): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6892): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058448.044:7375): avc: denied { read } for pid=50647 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6754): avc: denied { read } for pid=34076 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.734:8132): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[337796]" dev="sockfs" ino=337796 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.930:8504): avc: denied { open } for pid=98164 comm="pgrep" path="/proc/25074/status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8856): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.039:7713): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="socket:[160653]" dev="sockfs" ino=160653 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7645): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.433:8328): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.735:7337): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.735:8880): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.727:7728): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.434:6940): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.735:8814): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[358955]" dev="sockfs" ino=358955 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.964:7391): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.734:8125): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058574.886:7885): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.244:7933): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8662): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058516.432:7697): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.661:6549): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.433:8032): avc: denied { read } for pid=34076 comm="node_exporter" name="eno1" dev="sysfs" ino=34629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8854): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.432:6917): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.727:7729): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058438.956:7364): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058368.825:7023): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.137:7086): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8493): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058600.254:8141): avc: denied { write } for pid=40714 comm="grafana-server" path="socket:[342056]" dev="sockfs" ino=342056 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.038:7712): avc: denied { write } for pid=25074 comm="msgr-worker-2" laddr=172.21.15.5 lport=3300 faddr=172.21.15.143 fport=38660 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8854): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058725.944:8788): avc: denied { open } for pid=101166 comm="pgrep" path="/proc/25074/status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.435:8805): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058575.121:7900): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1574979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7410): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.121:7247): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.121:8658): avc: denied { search } for pid=40714 comm="grafana-server" name="dashboards" dev="sda1" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.435:6944): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6568): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.781:7003): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058718.001:8745): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.432:8796): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7763): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.434:8528): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.513:7661): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058314.120:6735): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058311.695:6711): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058311.695:6711): avc: denied { open } for pid=41304 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058600.254:8139): avc: denied { getopt } for pid=40714 comm="grafana-server" laddr=172.21.15.5 lport=51032 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.855:6910): avc: denied { getattr } for pid=85251 comm="pgrep" path="/proc/25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.735:7779): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058575.646:7905): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058610.462:8177): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7757): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058610.462:8176): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058592.746:8060): avc: denied { append } for pid=25449 comm="log" path="/var/log/ceph/ceph-mgr.smithi005.givcyh.log" dev="sda1" ino=396136 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8494): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.525:7721): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.432:7641): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8157): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058726.435:8803): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.121:7404): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1574986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.119:8291): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.438:6998): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="socket:[160653]" dev="sockfs" ino=160653 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.431:8423): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8541): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[352474]" dev="sockfs" ino=352474 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7754): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=20806 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058446.434:7373): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.661:6549): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058738.004:8907): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.121:7742): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.432:8111): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8118): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.735:7127): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.941:6561): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.735:8881): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058574.886:7885): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6927): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8691): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8076): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.734:8123): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058738.004:8907): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058590.121:8051): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.016:8092): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058574.886:7889): avc: denied { write } for pid=44911 comm="msgr-worker-1" laddr=172.21.15.5 lport=56788 faddr=172.21.15.5 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7426): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7652): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8081): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="sda1" ino=1574982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.432:8321): avc: denied { read } for pid=34076 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.214:8667): avc: denied { read } for pid=50647 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7647): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7900): avc: denied { read } for pid=40714 comm="grafana-server" name="osds-overview.json" dev="sda1" ino=1574979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.026:7909): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058728.003:8819): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.650:6695): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6771): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058726.735:8812): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=48463 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.673:8016): avc: denied { read } for pid=50647 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.434:8526): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.188:6575): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.002:8478): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.432:7937): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.604:7069): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.026:7910): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.121:8079): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6737): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8889): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058288.509:6544): avc: denied { read } for pid=41304 comm="msgr-worker-2" path="socket:[267449]" dev="sockfs" ino=267449 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.035:7569): avc: denied { write } for pid=25074 comm="msgr-worker-2" laddr=172.21.15.5 lport=3300 faddr=172.21.15.143 fport=38660 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7761): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.955:8468): avc: denied { read } for pid=56119 comm="msgr-worker-1" path="pipe:[215791]" dev="pipefs" ino=215791 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.735:7780): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.342:7063): avc: denied { write } for pid=56119 comm="tp_osd_tp" path="pipe:[215790]" dev="pipefs" ino=215790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8471): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.757:6689): avc: denied { search } for pid=25449 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.434:6763): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6969): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.435:8333): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.988:8400): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.434:8444): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8716): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058662.992:8471): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.437:8036): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058718.001:8744): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058523.930:7735): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6966): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.090:8483): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7764): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.734:7453): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.433:8030): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.434:7956): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8518): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7634): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.435:6765): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.760:8308): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.431:7424): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6740): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.121:8664): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058292.927:6619): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.940:7012): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8904): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.424:8409): avc: denied { write } for pid=25449 comm="log" path="pipe:[122591]" dev="pipefs" ino=122591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.965:7688): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.433:8329): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7441): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7304): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7766): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.434:6938): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.434:7958): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.437:8163): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.437:8163): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.120:7608): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.948:6681): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6893): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.735:8701): avc: denied { getattr } for pid=42796 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=179846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.940:7010): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.120:7397): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.213:8666): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.119:8291): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058662.881:8465): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.121:8005): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058737.861:8906): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6895): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.434:8800): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7122): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.992:8711): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6918): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7019): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.432:7436): avc: denied { read } for pid=34076 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.424:8411): avc: denied { search } for pid=25425 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058465.198:7460): avc: denied { read } for pid=42796 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058650.120:8417): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8435): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.734:8449): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.735:7335): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8853): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058608.438:8170): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058600.254:8140): avc: denied { getattr } for pid=40714 comm="grafana-server" laddr=172.21.15.5 lport=51032 faddr=35.241.23.245 fport=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8888): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058524.121:7743): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.123:7253): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="sda1" ino=1574984 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.408:7353): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.064:6980): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8691): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058728.121:8821): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058505.821:7601): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.735:7778): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.697:8446): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.434:7768): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.988:8402): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6639): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.122:7249): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.406:7627): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8021): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { write } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db-journal" dev="overlay" ino=1970745 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058299.121:6670): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.342:7065): avc: denied { write } for pid=41304 comm="msgr-worker-0" laddr=172.21.15.5 lport=6802 faddr=172.21.15.143 fport=47854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.197:8301): avc: denied { getattr } for pid=42796 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.434:7328): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { getattr } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.433:7107): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.735:7966): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6916): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7893): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058592.980:8068): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.734:7459): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[312111]" dev="sockfs" ino=312111 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8108): avc: denied { read } for pid=34076 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.434:7957): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.434:6762): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7761): avc: denied { read } for pid=34076 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7038): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8706): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=33750 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.122:7082): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.434:6650): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.525:7721): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.432:8512): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058725.944:8788): avc: denied { search } for pid=101166 comm="pgrep" name="25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.122:7250): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058379.113:7055): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.431:8314): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8708): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[355934]" dev="sockfs" ino=355934 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058600.246:8138): avc: denied { connect } for pid=40714 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.121:8007): avc: denied { read } for pid=40714 comm="grafana-server" name="pool-detail.json" dev="sda1" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058658.992:8452): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.453:8531): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.064:6980): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8677): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8695): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.603:8741): avc: denied { read } for pid=44911 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058609.955:8173): avc: denied { open } for pid=56119 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7314): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7325): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.432:7939): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.774:7579): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7305): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.121:8074): avc: denied { search } for pid=40714 comm="grafana-server" name="dashboards" dev="sda1" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.431:8423): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6924): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058525.198:7746): avc: denied { open } for pid=42796 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.119:8291): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058369.944:7029): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058719.121:8778): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058611.066:8178): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.525:7720): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058607.060:8165): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058599.963:8133): avc: denied { read } for pid=40714 comm="grafana-server" name="png" dev="sda1" ino=1969007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.121:7342): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.434:7770): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8858): avc: denied { read } for pid=34076 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058446.432:7369): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.782:6719): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.008:8654): avc: denied { write } for pid=25449 comm="safe_timer" path="pipe:[142689]" dev="pipefs" ino=142689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8506): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.988:8400): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8116): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.988:8401): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058446.432:7368): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.121:8006): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058645.119:8291): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.315:6904): avc: denied { open } for pid=44911 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058589.362:8050): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058448.956:7376): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058645.119:8289): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.432:6747): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8475): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.432:7100): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.435:8802): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.979:8067): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8859): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { search } for pid=25449 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.120:7399): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6739): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.749:7383): avc: denied { append } for pid=50647 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=396209 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6972): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7034): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.434:7327): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8538): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.433:8031): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6921): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.026:7910): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.959:7413): avc: denied { read } for pid=56119 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.120:7398): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058735.078:8831): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.988:8072): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6743): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058727.071:8818): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.024:7244): avc: denied { open } for pid=56119 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.678:7727): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.434:8870): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058306.431:6683): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058379.002:7054): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058446.434:7372): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.433:8440): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6745): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8859): avc: denied { read } for pid=34076 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6641): avc: denied { read } for pid=34076 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7439): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058610.450:8175): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7439): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6970): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7323): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8319): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.431:7423): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058605.914:8146): avc: denied { open } for pid=95140 comm="pgrep" path="/proc/25049/status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.434:8690): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058718.001:8746): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7020): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6654): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.735:7338): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.735:8704): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.942:7073): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8717): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058525.198:7747): avc: denied { getattr } for pid=42796 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6637): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058728.121:8822): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7646): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.213:8666): avc: denied { open } for pid=50647 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6639): avc: denied { read } for pid=34076 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7899): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058577.977:8001): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8491): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.434:6939): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7035): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.734:6688): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.432:8678): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { getattr } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.432:7948): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.492:7415): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058658.231:8451): avc: denied { append } for pid=44911 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8661): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058718.001:8745): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6636): avc: denied { read } for pid=34076 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8889): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.191:6901): avc: denied { write } for pid=77255 comm="msgr-worker-0" laddr=172.21.15.5 lport=57146 faddr=172.21.15.143 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7319): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.984:8087): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058379.125:7056): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8027): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.121:7402): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7443): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058736.735:8883): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.433:6759): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.025:8002): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { add_name } for pid=40714 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.002:8478): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.433:6643): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.406:7626): avc: denied { search } for pid=44911 comm="safe_timer" name="diff" dev="sda1" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058662.881:8465): avc: denied { read } for pid=41304 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6736): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.433:8864): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.542:7726): avc: denied { open } for pid=56119 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058377.942:7052): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.837:8369): avc: denied { read } for pid=44911 comm="msgr-worker-1" path="socket:[230014]" dev="sockfs" ino=230014 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058607.982:8169): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058435.408:7266): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7436): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.735:8882): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6657): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.021:8486): avc: denied { read } for pid=25449 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7765): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.431:8313): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058589.236:8049): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.992:8713): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8490): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.434:8694): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.122:7084): avc: denied { read } for pid=40714 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1574978 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.432:8678): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8324): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.915:7386): avc: denied { write } for pid=44911 comm="safe_timer" path="pipe:[190581]" dev="pipefs" ino=190581 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8437): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.968:7732): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.942:8065): avc: denied { write } for pid=56119 comm="msgr-worker-1" laddr=172.21.15.5 lport=6826 faddr=172.21.15.143 fport=57716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7318): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.821:7600): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7639): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058446.433:7370): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.197:8299): avc: denied { read } for pid=42796 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7425): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.435:8332): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7635): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6658): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058576.735:7967): avc: denied { getattr } for pid=42796 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=179846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.505:8740): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.434:7327): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8078): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.432:8437): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.968:7730): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7408): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.121:7077): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.188:7574): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058719.121:8780): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8101): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.431:8099): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8099): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7427): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058585.198:8020): avc: denied { getattr } for pid=42796 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=16777360 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.855:6911): avc: denied { open } for pid=85251 comm="pgrep" path="/proc/25049/status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.434:8695): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.243:8403): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/lib/python3.6/site-packages/remoto/process.py" dev="overlay" ino=1048897 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.504:7417): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.008:8656): avc: denied { write } for pid=25449 comm="msgr-worker-1" laddr=172.21.15.5 lport=37816 faddr=172.21.15.5 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058307.928:6692): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.977:7997): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.504:7417): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7109): avc: denied { read } for pid=34076 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7655): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058726.434:8801): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8899): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.734:7450): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058314.120:6740): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.927:6622): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.016:8092): avc: denied { read } for pid=25449 comm="mgr-fin" name="localtime" dev="overlay" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.792:6699): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8521): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.752:8084): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058725.944:8786): avc: denied { open } for pid=101166 comm="pgrep" path="/proc/25049/status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.432:6753): avc: denied { read } for pid=34076 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8021): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.433:8162): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.734:7449): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.946:7687): avc: denied { open } for pid=56119 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.352:8093): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.735:7049): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8101): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.929:6724): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.121:7081): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058446.432:7367): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058722.121:8783): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058382.604:7069): avc: denied { read } for pid=50647 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7946): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058607.060:8165): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.936:6729): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058507.845:7686): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7764): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.735:7785): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[328976]" dev="sockfs" ino=328976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7671): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=55226 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.964:7391): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058451.964:7391): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.434:7962): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.735:8811): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6656): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.821:7602): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.213:8666): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8431): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.188:7574): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8432): avc: denied { read } for pid=34076 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.060:7246): avc: denied { read } for pid=41304 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.432:7102): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.511:7657): avc: denied { append } for pid=25074 comm="log" path="/var/log/ceph/ceph-mon.smithi005.log" dev="sda1" ino=396130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.525:7721): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.434:8694): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058311.695:6710): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8155): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.855:6913): avc: denied { open } for pid=85251 comm="pgrep" path="/proc/25074/status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.197:8299): avc: denied { search } for pid=42796 comm="prometheus" name="diff" dev="sda1" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.434:7117): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.216:7901): avc: denied { open } for pid=44911 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { write } for pid=40714 comm="grafana-server" name="grafana" dev="overlay" ino=1968329 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.781:7002): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.123:7252): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8098): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7316): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058718.001:8744): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.855:6913): avc: denied { search } for pid=85251 comm="pgrep" name="25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8508): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7673): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[324188]" dev="sockfs" ino=324188 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8492): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7105): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6891): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.433:7950): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058311.934:6717): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7123): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7769): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.121:8004): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.735:8539): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6729): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058435.396:7264): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.097:7058): avc: denied { append } for pid=44911 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8661): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.122:7082): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.942:7072): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.794:6722): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7768): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.219:8849): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.952:7095): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058735.345:8842): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058525.791:7749): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.964:7391): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.930:8504): avc: denied { search } for pid=98164 comm="pgrep" name="25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.507:7355): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058293.650:6627): avc: denied { read } for pid=56119 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.433:8684): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6572): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.122:7083): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8687): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8683): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.513:7660): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.064:6982): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.965:7688): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8855): avc: denied { read } for pid=34076 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7445): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6631): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.649:8413): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.432:7103): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.782:6718): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.432:7651): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8326): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7306): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.121:7739): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.929:6725): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6778): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[291851]" dev="sockfs" ino=291851 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6967): avc: denied { getattr } for pid=42796 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=179846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.434:8444): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058738.005:8908): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.980:8068): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.436:8875): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.016:8092): avc: denied { search } for pid=25449 comm="mgr-fin" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.213:8666): avc: denied { read } for pid=50647 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7939): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7633): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.345:8841): avc: denied { read } for pid=44911 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7628): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058650.120:8417): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.940:7010): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058718.001:8744): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7016): avc: denied { search } for pid=40714 comm="grafana-server" name="dashboards" dev="sda1" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058311.571:6709): avc: denied { write } for pid=56119 comm="msgr-worker-2" laddr=172.21.15.5 lport=6826 faddr=172.21.15.143 fport=57596 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.433:6759): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.060:7246): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.952:7095): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058718.001:8744): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7106): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.431:8426): avc: denied { read } for pid=34076 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8902): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.957:7259): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.256:7935): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.390:6906): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.038:7710): avc: denied { write } for pid=25074 comm="safe_timer" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6745): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.719:7991): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7941): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.258:8835): avc: denied { read } for pid=77255 comm="msgr-worker-1" path="pipe:[267848]" dev="pipefs" ino=267848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.782:6720): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6749): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8717): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058446.434:7371): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7109): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.957:7259): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.121:8075): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058663.002:8478): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058593.984:8085): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058735.258:8840): avc: denied { append } for pid=41304 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7442): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.026:7910): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.697:8447): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.121:8665): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="sda1" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.735:7782): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7648): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8356): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8106): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8321): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.432:7752): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.952:7095): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.735:6777): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[291370]" dev="sockfs" ino=291370 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.957:7257): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058663.150:8484): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6744): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.121:7345): avc: denied { read } for pid=40714 comm="grafana-server" name="cephfs-overview.json" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.433:7950): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.432:8118): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058369.002:7025): avc: denied { read } for pid=25449 comm="mgr-fin" name="localtime" dev="sda1" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058288.941:6561): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.167:7349): avc: denied { append } for pid=44911 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.513:7661): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058382.942:7072): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058314.120:6738): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8520): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8434): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7447): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7045): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8715): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058446.434:7374): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.432:6635): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.431:8312): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7016): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058289.306:6566): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058521.774:7707): avc: denied { write } for pid=41304 comm="msgr-worker-2" laddr=172.21.15.5 lport=6806 faddr=172.21.15.143 fport=36716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.121:7344): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.191:6902): avc: denied { read } for pid=41304 comm="msgr-worker-2" path="socket:[267856]" dev="sockfs" ino=267856 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7775): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.432:8509): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7610): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7437): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.855:6913): avc: denied { read } for pid=85251 comm="pgrep" name="status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.025:8002): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7759): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8717): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.650:8699): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.649:8413): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7043): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.268:8014): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058719.122:8781): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1574986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8077): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7670): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.120:6694): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058664.747:8489): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7630): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058435.396:7265): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.121:8378): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6775): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.433:7105): avc: denied { read } for pid=34076 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.121:7404): avc: denied { read } for pid=40714 comm="grafana-server" name="rbd-overview.json" dev="sda1" ino=1574986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.432:6755): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.929:6724): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7017): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.137:7086): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.725:7992): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6975): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[293482]" dev="sockfs" ino=293482 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6922): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7667): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.432:6633): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7432): avc: denied { read } for pid=34076 comm="node_exporter" name="cpufreq" dev="sysfs" ino=29977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7317): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8322): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.941:6561): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058524.122:7744): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.511:7658): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7408): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.734:8366): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[350226]" dev="sockfs" ino=350226 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8429): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058293.121:6625): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.940:7011): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.476:8056): avc: denied { write } for pid=25074 comm="ms_dispatch" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8103): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6634): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.977:8000): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8852): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.238:7575): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.437:8035): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.955:8469): avc: denied { write } for pid=56119 comm="msgr-worker-1" laddr=172.21.15.5 lport=6826 faddr=172.21.15.143 fport=57716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.735:6664): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8900): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.431:8108): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.434:6651): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6895): avc: denied { read } for pid=40714 comm="grafana-server" name="hosts-overview.json" dev="sda1" ino=1574977 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.064:6982): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.121:8007): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="sda1" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.431:8099): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.433:6931): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.781:7003): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058451.776:7384): avc: denied { read } for pid=25449 comm="msgr-worker-0" path="socket:[165273]" dev="sockfs" ino=165273 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.833:7683): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.424:8411): avc: denied { write } for pid=25425 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.432:8436): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.436:8875): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.433:6642): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058660.046:8454): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7437): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058608.450:8172): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.006:7243): avc: denied { search } for pid=25449 comm="mgr-fin" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.434:7774): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058376.433:7046): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.941:6560): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.064:6981): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.431:8425): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.433:7953): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.509:6543): avc: denied { write } for pid=74258 comm="msgr-worker-2" laddr=172.21.15.5 lport=43374 faddr=172.21.15.143 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.509:6541): avc: denied { read } for pid=74258 comm="msgr-worker-1" path="pipe:[265010]" dev="pipefs" ino=265010 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058293.121:6626): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.433:7949): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6741): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-overview.json" dev="overlay" ino=1574981 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.734:8124): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058728.003:8819): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058307.823:6690): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8074): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.432:8677): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.149:7090): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.434:7958): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.735:8487): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.148:8055): avc: denied { write } for pid=44911 comm="msgr-worker-1" laddr=172.21.15.5 lport=6816 faddr=172.21.15.143 fport=45224 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.735:7049): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.433:7313): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.929:6726): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.661:6548): avc: denied { search } for pid=25449 comm="safe_timer" name="diff" dev="sda1" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.735:7332): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7317): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { create } for pid=40714 comm="grafana-server" name="grafana.db-journal" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.433:6644): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.431:8314): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7631): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8679): avc: denied { read } for pid=34076 comm="node_exporter" name="xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.942:8066): avc: denied { read } for pid=41304 comm="msgr-worker-1" path="pipe:[175007]" dev="pipefs" ino=175007 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.191:6897): avc: denied { write } for pid=77255 comm="ceph_timer" path="pipe:[267848]" dev="pipefs" ino=267848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8522): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.256:7935): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.435:8874): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058451.824:7385): avc: denied { write } for pid=41304 comm="msgr-worker-2" laddr=172.21.15.5 lport=6806 faddr=172.21.15.143 fport=36568 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8672): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.121:8902): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7610): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7021): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.256:8013): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7438): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8315): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8373): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058509.120:7694): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058725.944:8785): avc: denied { getattr } for pid=101166 comm="pgrep" path="/proc/25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058308.931:6701): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058575.216:7901): avc: denied { read } for pid=44911 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6971): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.781:7001): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.434:8530): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058367.438:6999): avc: denied { write } for pid=25074 comm="msgr-worker-2" laddr=172.21.15.5 lport=3300 faddr=172.21.15.143 fport=38660 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.959:7413): avc: denied { open } for pid=56119 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.063:6979): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8111): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/hwmon/hwmon0" dev="sysfs" ino=34824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.453:8877): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.988:8072): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.431:8420): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.735:6665): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.751:8743): avc: denied { append } for pid=25449 comm="log" path="/var/log/ceph/ceph-mgr.smithi005.givcyh.log" dev="sda1" ino=396136 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.758:6697): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.215:8082): avc: denied { read } for pid=44911 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.940:7011): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.432:8795): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8158): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8158): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.734:7456): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.197:8299): avc: denied { open } for pid=42796 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.026:7910): avc: denied { search } for pid=25049 comm="conmon" name="systemd" dev="tmpfs" ino=14516 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.121:7404): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="sda1" ino=1574986 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058433.954:7240): avc: denied { write } for pid=25074 comm="msgr-worker-2" laddr=172.21.15.5 lport=3300 faddr=172.21.15.143 fport=38660 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.734:7454): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7119): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.784:7008): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.881:8463): avc: denied { search } for pid=41304 comm="safe_timer" name="diff" dev="sda1" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058504.035:7568): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.845:7685): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.992:8713): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.432:7652): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7753): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7430): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.450:7330): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7948): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058738.005:8908): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.432:7100): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058600.246:8138): avc: denied { name_connect } for pid=40714 comm="grafana-server" dest=443 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:http_port_t:s0 tclass=tcp_socket permissive=1', 'type=AVC msg=audit(1616058383.149:7091): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.957:7258): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.121:6892): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8681): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=50013 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7668): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.431:8159): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=34637 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058369.064:7026): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.064:6983): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.121:7611): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.090:8832): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6893): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.434:7326): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.433:6649): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.121:7402): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8537): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7760): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6634): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.122:7082): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.121:7345): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="sda1" ino=1574975 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.408:7351): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.349:8303): avc: denied { read } for pid=44911 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8439): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.959:7412): avc: denied { open } for pid=56119 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7607): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058733.068:8826): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058369.944:7030): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.735:6967): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.735:6662): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.146:7089): avc: denied { open } for pid=41304 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058605.914:8146): avc: denied { read } for pid=95140 comm="pgrep" name="status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058509.120:7694): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.895:6978): avc: denied { read } for pid=56119 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6573): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8511): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.431:6685): avc: denied { read } for pid=34076 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7408): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.936:6729): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058437.408:7353): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058308.770:6698): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.433:6934): avc: denied { read } for pid=34076 comm="node_exporter" name="stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.441:7965): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.149:7090): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7893): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058728.121:8822): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.433:7112): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7943): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7309): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7442): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.121:7740): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.930:8501): avc: denied { getattr } for pid=98164 comm="pgrep" path="/proc/25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.930:8502): avc: denied { open } for pid=98164 comm="pgrep" path="/proc/25049/status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058656.697:8446): avc: denied { open } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058717.603:8741): avc: denied { open } for pid=44911 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.845:7685): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058305.948:6682): avc: denied { read } for pid=25074 comm="msgr-worker-2" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.433:7951): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7633): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6750): avc: denied { read } for pid=34076 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.121:8007): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1574980 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.349:8302): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.437:8163): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.034:7708): avc: denied { append } for pid=56119 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=396212 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.432:7750): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.648:8307): avc: denied { search } for pid=50647 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { getattr } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058574.886:7886): avc: denied { append } for pid=44911 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=396204 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058293.121:6623): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.434:6762): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.432:8114): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.352:8094): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.979:8067): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.121:7077): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.432:8112): avc: denied { read } for pid=34076 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.016:8092): avc: denied { search } for pid=25449 comm="mgr-fin" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.735:6663): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.927:6619): avc: denied { getattr } for pid=25074 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.735:7333): avc: denied { getattr } for pid=42796 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=179846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7446): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.992:8713): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058299.121:6670): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.432:7435): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.855:6911): avc: denied { search } for pid=85251 comm="pgrep" name="25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058577.977:7999): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058738.004:8907): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.024:7244): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.090:8895): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.408:7300): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058305.947:6680): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.434:7118): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.026:7910): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058504.188:7574): avc: denied { open } for pid=41304 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058732.682:8825): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058578.673:8016): avc: denied { open } for pid=50647 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.735:7132): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=37612 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.735:8533): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058316.435:6765): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058377.112:7051): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8680): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6889): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.068:6915): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.681:7420): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7666): avc: denied { signal } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.258:8834): avc: denied { write } for pid=77255 comm="ceph_timer" path="pipe:[267848]" dev="pipefs" ino=267848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.256:7936): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.408:7350): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.121:8490): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058453.504:7418): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6752): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.433:8515): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6771): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.980:8069): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.542:7726): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7897): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.525:7719): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.120:7401): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.782:6719): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.433:6645): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.735:8810): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7429): avc: denied { read } for pid=34076 comm="node_exporter" name="ce_count" dev="sysfs" ino=48268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.845:7685): avc: denied { getattr } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058524.121:7741): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058719.005:8772): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.433:8866): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8374): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058434.060:7246): avc: denied { open } for pid=41304 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.433:7445): avc: denied { search } for pid=34076 comm="node_exporter" name="kernel" dev="proc" ino=165928 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.341:7062): avc: denied { read } for pid=56119 comm="msgr-worker-0" path="socket:[268846]" dev="sockfs" ino=268846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8434): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058290.121:6568): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.120:8373): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058652.989:8419): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.433:8858): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8107): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058660.046:8455): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8509): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.735:8488): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.735:8039): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.345:8841): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8674): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.433:8028): avc: denied { read } for pid=34076 comm="node_exporter" name="xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6746): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6633): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.735:8044): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[335591]" dev="sockfs" ino=335591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058610.174:8174): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { getattr } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.431:8310): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.542:7726): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058605.914:8145): avc: denied { getattr } for pid=95140 comm="pgrep" path="/proc/25049" dev="proc" ino=122432 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.433:8860): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.122:7744): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058507.845:7685): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.433:8031): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6918): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.434:7769): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.120:7397): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.433:6934): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058435.396:7264): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8322): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058524.122:7744): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.435:8330): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.121:7343): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8889): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058446.432:7368): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.121:7403): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1574974 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.434:7960): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058576.735:7973): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[334217]" dev="sockfs" ino=334217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.433:8685): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7900): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="sda1" ino=1574979 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058647.120:8375): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058453.504:7417): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.513:7661): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.433:8523): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.345:8841): avc: denied { search } for pid=44911 comm="safe_timer" name="diff" dev="sda1" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058378.758:7053): avc: denied { open } for pid=44911 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058308.931:6700): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058465.198:7460): avc: denied { open } for pid=42796 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.953:7362): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058737.074:8887): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.433:8866): avc: denied { search } for pid=34076 comm="node_exporter" name="user" dev="tmpfs" ino=14035 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.837:8368): avc: denied { read } for pid=41304 comm="msgr-worker-2" path="socket:[235539]" dev="sockfs" ino=235539 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.060:7245): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.952:7093): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058292.927:6619): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7942): avc: denied { read } for pid=34076 comm="node_exporter" name="mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.979:8067): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.435:7964): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058307.928:6691): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.451:6660): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.977:7998): avc: denied { open } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.122:7251): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.406:7626): avc: denied { open } for pid=44911 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.256:7935): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058737.090:8897): avc: denied { getattr } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058737.121:8904): avc: denied { read open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.953:7359): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058665.121:8495): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058663.002:8477): avc: denied { read } for pid=25049 comm="conmon" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.432:6928): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058314.120:6739): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058522.968:7730): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.648:8357): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.957:7259): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058645.117:8284): avc: denied { append } for pid=25074 comm="log" path="/var/log/ceph/ceph-mon.smithi005.log" dev="sda1" ino=396130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.435:8333): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.734:8360): avc: denied { search } for pid=42796 comm="prometheus" name="etc" dev="sda1" ino=1970591 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058737.090:8895): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.071:8828): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058578.121:8005): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6640): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6772): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.006:7243): avc: denied { getattr } for pid=25449 comm="mgr-fin" name="UTC" dev="sda1" ino=1312345 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.734:8129): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8472): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.342:7064): avc: denied { read } for pid=56119 comm="msgr-worker-0" path="pipe:[215790]" dev="pipefs" ino=215790 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.838:8372): avc: denied { write } for pid=41304 comm="msgr-worker-0" laddr=172.21.15.5 lport=6808 faddr=172.21.15.143 fport=41314 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.214:8667): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7037): avc: denied { read } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058311.156:6703): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.408:7351): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058718.001:8748): avc: denied { write } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.432:6750): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=20785 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.509:6546): avc: denied { append } for pid=41304 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7303): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058717.072:8717): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.149:7090): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058736.432:8850): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8658): avc: denied { search } for pid=40714 comm="grafana-server" name="diff" dev="sda1" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058606.424:8150): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.512:7659): avc: denied { use } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.315:6904): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058666.432:8507): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7046): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058307.928:6691): avc: denied { search } for pid=25074 comm="safe_timer" name="mon.smithi005" dev="dm-4" ino=50331776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.431:8311): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6774): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7893): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.992:8713): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.433:8798): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.431:7638): avc: denied { read } for pid=34076 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7431): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/net/ens1f1" dev="sysfs" ino=37772 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.735:6773): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7898): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.734:8130): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=55203 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.122:7251): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.432:8325): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058726.735:8813): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[353101]" dev="sockfs" ino=353101 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058728.003:8820): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058735.770:8844): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.432:8433): avc: denied { read } for pid=34076 comm="node_exporter" name="hwmon0" dev="sysfs" ino=34828 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.035:7566): avc: denied { write } for pid=25074 comm="safe_timer" path="pipe:[121666]" dev="pipefs" ino=121666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7948): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058504.238:7575): avc: denied { read } for pid=41304 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8102): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.750:7906): avc: denied { search } for pid=56119 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058316.434:6762): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058590.121:8053): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.433:7314): avc: denied { read } for pid=34076 comm="node_exporter" name="physical_package_id" dev="sysfs" ino=28137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.734:7669): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058662.992:8473): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8658): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.243:8403): avc: denied { read } for pid=25449 comm="mgr-fin" name="lib" dev="sda1" ino=394929 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.432:8675): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=50011 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8115): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.436:8034): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.123:7253): avc: denied { read } for pid=40714 comm="grafana-server" name="radosgw-sync-overview.json" dev="sda1" ino=1574984 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058452.959:7412): avc: denied { search } for pid=56119 comm="safe_timer" name="/" dev="overlay" ino=1970684 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c279,c289 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.959:7412): avc: denied { read } for pid=56119 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.432:8023): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058365.855:6911): avc: denied { read } for pid=85251 comm="pgrep" name="status" dev="proc" ino=122436 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.121:8660): avc: denied { lock } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058665.930:8503): avc: denied { getattr } for pid=98164 comm="pgrep" path="/proc/25074" dev="proc" ino=123872 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { dac_override } for pid=40714 comm="grafana-server" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058730.993:8824): avc: denied { read } for pid=25449 comm="msgr-worker-1" path="pipe:[142689]" dev="pipefs" ino=142689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8317): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.120:7397): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.121:7080): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.432:7750): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.743:7993): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6924): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.120:7609): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.374:7981): avc: denied { append } for pid=41304 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=396203 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.432:6919): avc: denied { read } for pid=34076 comm="node_exporter" name="fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.604:7069): avc: denied { open } for pid=50647 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058436.432:7302): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7120): avc: denied { search } for pid=34076 comm="node_exporter" name="containers" dev="sda1" ino=1234 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058314.120:6735): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058525.198:7746): avc: denied { search } for pid=42796 comm="prometheus" name="/" dev="overlay" ino=1970580 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7043): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.244:7933): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.648:8354): avc: denied { search } for pid=25449 comm="safe_timer" name="/" dev="overlay" ino=1443995 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058647.121:8378): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.953:7359): avc: denied { search } for pid=25074 comm="safe_timer" name="/" dev="overlay" ino=1443976 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.424:8150): avc: denied { open } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8101): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.513:7661): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058523.942:7737): avc: denied { search } for pid=25449 comm="safe_timer" name="etc" dev="sda1" ino=1444004 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058600.057:8135): avc: denied { unlink } for pid=40714 comm="grafana-server" name="grafana.db-journal" dev="sda1" ino=1970745 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058645.349:8303): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.341:7061): avc: denied { read } for pid=41304 comm="msgr-worker-0" path="socket:[273762]" dev="sockfs" ino=273762 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.927:6619): avc: denied { dac_read_search } for pid=25074 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.137:7086): avc: denied { search } for pid=25449 comm="safe_timer" name="libpod-b5758877f2af4b8df403eb00302b938a7f6055af36295c7e76b325e595623519.scope" dev="cgroup" ino=5507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058575.121:7898): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.431:8422): avc: denied { read } for pid=34076 comm="node_exporter" name="stat" dev="proc" ino=166042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8100): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=166043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.432:8854): avc: denied { read } for pid=34076 comm="node_exporter" name="mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058526.433:7766): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=167067 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.433:8683): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.512:7659): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058647.121:8380): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058717.271:8722): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058434.006:7243): avc: denied { search } for pid=25449 comm="mgr-fin" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058662.946:8466): avc: denied { read } for pid=25449 comm="msgr-worker-2" path="socket:[237644]" dev="sockfs" ino=237644 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058382.942:7074): avc: denied { getattr } for pid=25074 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi005/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058664.021:8486): avc: denied { read } for pid=25449 comm="mgr-fin" name="localtime" dev="overlay" ino=394698 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058590.121:8051): avc: denied { search } for pid=40714 comm="grafana-server" name="/" dev="overlay" ino=1968483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058437.408:7352): avc: denied { getattr } for pid=25449 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058449.120:7380): avc: denied { getattr } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7943): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.442:8122): avc: denied { append } for pid=42796 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=16777362 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c368,c755 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.735:6973): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=34474 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058506.432:7647): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058663.002:8478): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.433:6649): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.432:7428): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058586.432:8026): avc: denied { read } for pid=34076 comm="node_exporter" name="file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058438.956:7366): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058386.433:7113): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.121:8663): avc: denied { read } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058370.379:7031): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.934:6669): avc: denied { search } for pid=25049 comm="conmon" name="journal" dev="tmpfs" ino=14800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058366.432:6925): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058366.434:6941): avc: denied { search } for pid=34076 comm="node_exporter" name="lib" dev="sda1" ino=1094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058521.774:7705): avc: denied { read } for pid=41304 comm="msgr-worker-1" path="socket:[236694]" dev="sockfs" ino=236694 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.432:8121): avc: denied { search } for pid=34076 comm="node_exporter" name="host" dev="sda1" ino=1970471 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058600.246:8136): avc: denied { create } for pid=40714 comm="grafana-server" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058596.431:8103): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058527.456:7786): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058312.794:6721): avc: denied { getattr } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.433:8521): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8671): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058656.434:8442): avc: denied { search } for pid=34076 comm="node_exporter" name="net" dev="proc" ino=155383 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.952:7093): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058574.886:7885): avc: denied { open } for pid=44911 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.399:8096): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058645.349:8302): avc: denied { open } for pid=44911 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.980:8068): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7022): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1574983 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058381.949:7057): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.432:8315): avc: denied { read } for pid=34076 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.432:8676): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058599.964:8134): avc: denied { write } for pid=40714 comm="grafana-server" name="grafana" dev="sda1" ino=1968497 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.434:8693): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.433:8865): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="devtmpfs" ino=1026 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058367.781:7003): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058716.917:8709): avc: denied { search } for pid=41304 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058505.833:7603): avc: denied { search } for pid=25449 comm="safe_timer" name="usr" dev="sda1" ino=789155 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058666.735:8540): avc: denied { getattr } for pid=42796 comm="prometheus" laddr=172.21.15.5 lport=55633 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.999:7024): avc: denied { search } for pid=41304 comm="safe_timer" name="/" dev="overlay" ino=1970627 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c921,c982 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.433:7762): avc: denied { read } for pid=34076 comm="node_exporter" name="eno1" dev="sysfs" ino=34629 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.464:8164): avc: denied { search } for pid=50647 comm="safe_timer" name="/" dev="overlay" ino=1970665 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c684,c973 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058452.954:7409): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.984:8087): avc: denied { search } for pid=25049 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058506.120:7605): avc: denied { getattr } for pid=40714 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1574973 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058436.735:7341): avc: denied { read } for pid=42796 comm="prometheus" path="socket:[313489]" dev="sockfs" ino=313489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058526.432:7752): avc: denied { search } for pid=34076 comm="node_exporter" name="7" dev="proc" ino=155377 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058592.988:8072): avc: denied { read } for pid=44911 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058716.214:8667): avc: denied { open } for pid=50647 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.433:7041): avc: denied { open } for pid=34076 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=50083 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.434:8868): avc: denied { getattr } for pid=34076 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=48080 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7947): avc: denied { search } for pid=34076 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058586.735:8040): avc: denied { connect } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058288.673:6551): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.432:6635): avc: denied { search } for pid=34076 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058600.057:8135): avc: denied { remove_name } for pid=40714 comm="grafana-server" name="grafana.db-journal" dev="overlay" ino=1970745 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.434:7957): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14507 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.215:8082): avc: denied { search } for pid=44911 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.315:6904): avc: denied { read } for pid=44911 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058383.137:7086): avc: denied { read } for pid=25449 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=5514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058292.238:6609): avc: denied { write } for pid=25049 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058737.074:8889): avc: denied { write } for pid=25049 comm="conmon" name="socket" dev="tmpfs" ino=14804 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058383.121:7077): avc: denied { search } for pid=40714 comm="grafana-server" name="dashboards" dev="sda1" ino=1574972 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058296.432:6631): avc: denied { search } for pid=34076 comm="node_exporter" name="/" dev="overlay" ino=1970462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c295,c479 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058646.432:8325): avc: denied { search } for pid=34076 comm="node_exporter" name="1" dev="proc" ino=162062 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058717.072:8715): avc: denied { write } for pid=25074 comm="fn_monstore" path="pipe:[127042]" dev="pipefs" ino=127042 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058596.431:8106): avc: denied { search } for pid=34076 comm="node_exporter" name="fs" dev="proc" ino=163123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058605.915:8148): avc: denied { read } for pid=95140 comm="pgrep" name="status" dev="proc" ino=123894 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058576.432:7943): avc: denied { read } for pid=34076 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.432:6635): avc: denied { read } for pid=34076 comm="node_exporter" name="entropy_avail" dev="proc" ino=162666 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058594.364:8095): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="overlay" ino=396109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c105,c545 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.735:8879): avc: denied { getattr } for pid=42796 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=179846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7123): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=163124 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.735:7133): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[302302]" dev="sockfs" ino=302302 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058715.933:8652): avc: denied { read } for pid=25449 comm="msgr-worker-1" path="socket:[165268]" dev="sockfs" ino=165268 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058593.121:8081): avc: denied { open } for pid=40714 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1574982 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058606.433:8161): avc: denied { getattr } for pid=34076 comm="node_exporter" name="/" dev="tmpfs" ino=14508 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058365.121:6891): avc: denied { read } for pid=40714 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1968498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058376.432:7037): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058522.525:7721): avc: denied { sendto } for pid=25049 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058726.905:8815): avc: denied { search } for pid=44911 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1970647 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c434,c905 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058456.432:7433): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058648.244:8404): avc: denied { getattr } for pid=25449 comm="mgr-fin" path="/usr/lib64/python3.6" dev="sda1" ino=1050275 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058456.734:7451): avc: denied { create } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058368.121:7016): avc: denied { search } for pid=40714 comm="grafana-server" name="etc" dev="sda1" ino=1968489 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c211,c270 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058453.504:7417): avc: denied { read } for pid=25449 comm="safe_timer" name="os-release" dev="sda1" ino=394716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058647.988:8399): avc: denied { search } for pid=25074 comm="safe_timer" name="var" dev="sda1" ino=1443987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c275,c617 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058646.734:8363): avc: denied { setopt } for pid=42796 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058577.977:7998): avc: denied { read } for pid=25074 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058386.434:7124): avc: denied { read } for pid=34076 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058306.431:6683): avc: denied { open } for pid=34076 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058726.005:8790): avc: denied { read } for pid=77255 comm="msgr-worker-0" path="socket:[271065]" dev="sockfs" ino=271065 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058736.735:8885): avc: denied { write } for pid=42796 comm="prometheus" path="socket:[360246]" dev="sockfs" ino=360246 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058296.435:6657): avc: denied { search } for pid=34076 comm="node_exporter" name="var" dev="sda1" ino=1093 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"'] |
||||||||||||||
| fail | 5975336 |
|
2021-03-17 23:53:47 | 2021-03-18 08:42:29 | 2021-03-18 09:56:16 | 1:13:47 | 1:05:46 | 0:08:01 | smithi | master | rhel | 8.3 | rados/singleton/{all/lost-unfound-delete mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8}} | 1 |
Failure Reason:
Scrubbing terminated -- not all pgs were active and clean. |
||||||||||||||
| pass | 5975337 |
|
2021-03-17 23:53:48 | 2021-03-18 08:43:09 | 2021-03-18 09:15:00 | 0:31:51 | 0:21:48 | 0:10:03 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/fast mon_election/classic msgr-failures/fastclose objectstore/bluestore-comp-snappy rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/ec-small-objects-many-deletes} | 2 |
| pass | 5975338 |
|
2021-03-17 23:53:49 | 2021-03-18 08:43:30 | 2021-03-18 09:21:37 | 0:38:07 | 0:26:24 | 0:11:43 | smithi | master | ubuntu | 20.04 | rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04-15.2.9 2-repo_digest/defaut 3-start-upgrade 4-wait mon_election/classic} | 2 |
| pass | 5975339 |
|
2021-03-17 23:53:50 | 2021-03-18 08:43:30 | 2021-03-18 08:59:56 | 0:16:26 | 0:05:35 | 0:10:51 | smithi | master | ubuntu | 18.04 | rados/objectstore/{backends/fusestore supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975340 |
|
2021-03-17 23:53:51 | 2021-03-18 08:44:20 | 2021-03-18 09:03:44 | 0:19:24 | 0:10:03 | 0:09:21 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/connectivity objectstore/bluestore-stupid openstack scheduler/dmclock_1Shard_16Threads settings/optimized ubuntu_18.04 workloads/radosbench_4K_seq_read} | 1 |
| pass | 5975341 |
|
2021-03-17 23:53:52 | 2021-03-18 08:44:21 | 2021-03-18 09:01:48 | 0:17:27 | 0:07:21 | 0:10:06 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/cache-fs-trunc mon_election/connectivity rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975342 |
|
2021-03-17 23:53:53 | 2021-03-18 08:44:21 | 2021-03-18 09:04:25 | 0:20:04 | 0:10:09 | 0:09:55 | smithi | master | centos | 8.2 | rados/cephadm/workunits/{0-distro/centos_8.2_kubic_stable mon_election/connectivity task/test_cephadm_repos} | 1 |
| pass | 5975343 |
|
2021-03-17 23:53:54 | 2021-03-18 08:45:31 | 2021-03-18 09:14:34 | 0:29:03 | 0:18:29 | 0:10:34 | smithi | master | centos | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{default} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/fastclose msgr/async objectstore/bluestore-hybrid rados supported-random-distro$/{centos_8} thrashers/none thrashosds-health workloads/cache-pool-snaps-readproxy} | 2 |
| pass | 5975344 |
|
2021-03-17 23:53:55 | 2021-03-18 08:45:32 | 2021-03-18 09:34:24 | 0:48:52 | 0:40:23 | 0:08:29 | smithi | master | centos | 8.3 | rados/standalone/{mon_election/classic supported-random-distro$/{centos_8} workloads/erasure-code} | 1 |
| pass | 5975345 |
|
2021-03-17 23:53:56 | 2021-03-18 08:45:32 | 2021-03-18 09:35:44 | 0:50:12 | 0:38:49 | 0:11:23 | smithi | master | ubuntu | 20.04 | rados/cephadm/thrash/{0-distro/ubuntu_20.04_kubic_testing 1-start 2-thrash 3-tasks/snaps-few-objects fixed-2 msgr/async-v2only root} | 2 |
| pass | 5975346 |
|
2021-03-17 23:53:58 | 2021-03-18 08:46:22 | 2021-03-18 09:08:55 | 0:22:33 | 0:10:13 | 0:12:20 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/connectivity msgr-failures/few objectstore/filestore-xfs rados recovery-overrides/{more-async-recovery} supported-random-distro$/{centos_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975347 |
|
2021-03-17 23:54:00 | 2021-03-18 08:47:33 | 2021-03-18 10:19:49 | 1:32:16 | 1:23:00 | 0:09:16 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/lost-unfound mon_election/connectivity msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-lz4 rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975348 |
|
2021-03-17 23:54:02 | 2021-03-18 08:47:33 | 2021-03-18 09:25:39 | 0:38:06 | 0:23:58 | 0:14:08 | smithi | master | ubuntu | 20.04 | rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_stable fixed-2 mode/packaged mon_election/classic msgr/async-v2only start tasks/rados_python} | 2 |
| pass | 5975349 |
|
2021-03-17 23:54:03 | 2021-03-18 08:48:53 | 2021-03-18 09:13:24 | 0:24:31 | 0:18:49 | 0:05:42 | smithi | master | rhel | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/few msgr/async-v2only objectstore/filestore-xfs rados supported-random-distro$/{rhel_8} tasks/repair_test} | 2 |
| pass | 5975350 |
|
2021-03-17 23:54:04 | 2021-03-18 08:48:54 | 2021-03-18 09:06:50 | 0:17:56 | 0:08:13 | 0:09:43 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/ceph-kvstore-tool mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975351 |
|
2021-03-17 23:54:05 | 2021-03-18 08:49:54 | 2021-03-18 09:12:20 | 0:22:26 | 0:10:40 | 0:11:46 | smithi | master | ubuntu | 18.04 | rados/multimon/{clusters/6 mon_election/connectivity msgr-failures/many msgr/async no_pools objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{ubuntu_latest} tasks/mon_recovery} | 2 |
| pass | 5975352 |
|
2021-03-17 23:54:06 | 2021-03-18 08:50:55 | 2021-03-18 09:39:51 | 0:48:56 | 0:41:56 | 0:07:00 | smithi | master | rhel | 8.3 | rados/cephadm/smoke/{distro/rhel_8.3_kubic_stable fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975353 |
|
2021-03-17 23:54:07 | 2021-03-18 08:50:55 | 2021-03-18 09:08:28 | 0:17:33 | 0:10:44 | 0:06:49 | smithi | master | rhel | 8.3 | rados/singleton/{all/max-pg-per-osd.from-mon mon_election/classic msgr-failures/none msgr/async-v2only objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975354 |
|
2021-03-17 23:54:08 | 2021-03-18 08:51:36 | 2021-03-18 09:33:54 | 0:42:18 | 0:31:04 | 0:11:14 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{more-active-recovery} backoff/normal ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{ubuntu_latest} thrashers/pggrow thrashosds-health workloads/cache-pool-snaps} | 2 |
| pass | 5975355 |
|
2021-03-17 23:54:09 | 2021-03-18 08:52:26 | 2021-03-18 09:29:52 | 0:37:26 | 0:27:13 | 0:10:13 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-overwrites/{bluestore-bitmap ceph clusters/{fixed-2 openstack} fast/normal mon_election/classic msgr-failures/osd-delay rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/morepggrow thrashosds-health workloads/ec-snaps-few-objects-overwrites} | 2 |
| pass | 5975356 |
|
2021-03-17 23:54:11 | 2021-03-18 08:52:26 | 2021-03-18 09:29:03 | 0:36:37 | 0:24:46 | 0:11:51 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/connectivity msgr-failures/fastclose objectstore/bluestore-hybrid rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{ubuntu_latest} thrashers/careful thrashosds-health workloads/ec-rados-plugin=jerasure-k=4-m=2} | 3 |
| pass | 5975357 |
|
2021-03-17 23:54:12 | 2021-03-18 08:53:28 | 2021-03-18 09:28:59 | 0:35:31 | 0:28:00 | 0:07:31 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/classic msgr-failures/fastclose objectstore/bluestore-hybrid rados recovery-overrides/{more-async-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| pass | 5975358 |
|
2021-03-17 23:54:13 | 2021-03-18 08:53:48 | 2021-03-18 09:13:18 | 0:19:30 | 0:10:17 | 0:09:13 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/none mon_election/classic msgr-failures/few msgr/async-v1only objectstore/bluestore-hybrid rados tasks/mon_recovery validater/lockdep} | 2 |
| pass | 5975359 |
|
2021-03-17 23:54:14 | 2021-03-18 08:54:08 | 2021-03-18 09:19:53 | 0:25:45 | 0:14:33 | 0:11:12 | smithi | master | ubuntu | 18.04 | rados/cephadm/smoke/{distro/ubuntu_18.04 fixed-2 mon_election/classic start} | 2 |
| pass | 5975360 |
|
2021-03-17 23:54:15 | 2021-03-18 08:54:29 | 2021-03-18 09:57:55 | 1:03:26 | 0:56:52 | 0:06:34 | smithi | master | rhel | 8.3 | rados/monthrash/{ceph clusters/9-mons mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{rhel_8} thrashers/many workloads/rados_mon_osdmap_prune} | 2 |
| pass | 5975361 |
|
2021-03-17 23:54:16 | 2021-03-18 08:55:09 | 2021-03-18 11:03:14 | 2:08:05 | 1:56:34 | 0:11:31 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/3-size-2-min-size 1-install/nautilus-v2only backoff/peering ceph clusters/{openstack three-plus-one} d-balancer/on distro$/{ubuntu_18.04} mon_election/connectivity msgr-failures/few rados thrashers/morepggrow thrashosds-health workloads/radosbench} | 3 |
| pass | 5975362 |
|
2021-03-17 23:54:17 | 2021-03-18 08:55:40 | 2021-03-18 09:10:45 | 0:15:05 | 0:07:17 | 0:07:48 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/ceph-post-file mon_election/connectivity rados supported-random-distro$/{centos_8}} | 1 |
| fail | 5975363 |
|
2021-03-17 23:54:18 | 2021-03-18 08:55:40 | 2021-03-18 10:31:27 | 1:35:47 | 1:27:58 | 0:07:49 | smithi | master | rhel | 8.3 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/rhel_8.3_kubic_stable} | 2 |
Failure Reason:
SELinux denials found on ubuntu@smithi174.front.sepia.ceph.com: ['type=AVC msg=audit(1616059003.658:6787): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.659:7722): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.398:6827): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059167.757:7609): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7559): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.622:8301): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8422): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059431.376:8888): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.658:8175): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059513.796:9335): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.969:9123): avc: denied { read } for pid=48251 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8765): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.001:8854): avc: denied { open } for pid=48251 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6728): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059329.771:8359): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059515.756:9347): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.656:8413): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059509.360:9285): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.244:7487): avc: denied { open } for pid=26556 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.163:8341): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6768): avc: denied { read } for pid=35192 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.779:8785): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.010:9373): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059243.994:7921): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059166.566:7603): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6773): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.838:8922): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="socket:[167776]" dev="sockfs" ino=167776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.685:8928): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8074): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059106.367:7337): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.589:7268): avc: denied { append } for pid=42926 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.722:7300): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.757:8309): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.653:8315): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059332.505:8401): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.752:8102): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059271.376:8152): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8967): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[387987]" dev="sockfs" ino=387987 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8975): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9113): avc: denied { search } for pid=41684 comm="grafana-server" name="diff" dev="sda1" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059352.273:8505): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8026): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.757:6922): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059421.376:8834): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.715:7152): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7801): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7065): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059418.780:8827): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.913:8923): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059081.375:7110): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[314888]" dev="sockfs" ino=314888 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7316): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.657:8769): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059501.376:9253): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059521.376:9401): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[405824]" dev="sockfs" ino=405824 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.757:9119): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058999.757:6723): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.131:6863): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.660:7293): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.734:7645): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.367:7759): avc: denied { open } for pid=34376 comm="ceph-crash" path="/var/lib/ceph/crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059258.750:8047): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6895): avc: denied { read } for pid=35192 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059099.480:7247): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059516.287:9354): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9125): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059254.756:8040): avc: denied { search } for pid=41684 comm="grafana-server" name="dashboards" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059497.757:9232): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444456 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.093:6811): avc: denied { write } for pid=48251 comm="msgr-worker-1" laddr=172.21.15.174 lport=6814 faddr=172.21.15.179 fport=55068 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6728): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059249.757:7997): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059332.187:8399): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059093.657:7220): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6896): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.901:8310): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.937:8478): avc: denied { append } for pid=42926 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.963:8557): avc: denied { open } for pid=98760 comm="pgrep" path="/proc/26169/status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059171.376:7626): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[329200]" dev="sockfs" ino=329200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.657:9272): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059114.967:7358): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.732:7568): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8912): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8135): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059512.757:9310): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1444332 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059449.360:8994): avc: denied { read } for pid=42350 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9169): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059162.560:7515): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.736:7724): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059327.653:8316): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.657:7140): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.657:9271): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.758:7305): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.757:6922): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.660:7291): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.645:8452): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059098.756:7241): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.659:8431): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059181.376:7685): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7929): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059090.835:7211): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.388:7733): avc: denied { search } for pid=26556 comm="safe_timer" name="diff" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059327.653:8316): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059409.470:8685): avc: denied { write } for pid=75544 comm="msgr-worker-0" laddr=172.21.15.174 lport=43076 faddr=172.21.15.179 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.657:8848): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059191.376:7778): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[340243]" dev="sockfs" ino=340243 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6900): avc: denied { read } for pid=35192 comm="node_exporter" name="eno1" dev="sysfs" ino=35391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.756:7081): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="overlay" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.468:6869): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6781): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059081.375:7104): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.662:8545): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059423.657:8848): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.376:8485): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.753:7975): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.976:8789): avc: denied { read } for pid=101961 comm="pgrep" name="status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.656:7272): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.042:7968): avc: denied { read } for pid=42926 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7143): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.996:8481): avc: denied { read } for pid=53658 comm="msgr-worker-0" path="pipe:[219249]" dev="pipefs" ino=219249 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.656:7781): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { getattr } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.658:7798): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.756:8124): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.757:8566): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8025): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.804:8694): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.401:6761): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059423.657:8845): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.757:9309): avc: denied { search } for pid=41684 comm="grafana-server" name="dashboards" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.657:8030): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.036:7482): avc: denied { write } for pid=78099 comm="ceph_timer" path="pipe:[280148]" dev="pipefs" ino=280148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059248.748:7976): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.657:8169): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7065): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.776:8498): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.656:7707): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9166): avc: denied { read } for pid=35192 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.779:8786): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9330): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.755:7078): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.546:7500): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.757:6835): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.656:7540): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059181.376:7687): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.756:7938): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9319): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.659:8178): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.656:7539): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.705:6650): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059326.756:8304): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.347:7673): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7317): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.658:8774): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.757:6922): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.758:8135): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.657:8529): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.378:7051): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059421.376:8836): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=60237 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.655:9158): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7754): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.657:8076): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.408:7059): avc: denied { write } for pid=75544 comm="msgr-worker-0" laddr=172.21.15.174 lport=43076 faddr=172.21.15.179 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8982): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059369.831:8571): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058996.757:6674): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.592:7074): avc: denied { read } for pid=26556 comm="mgr-fin" name="localtime" dev="overlay" ino=265530 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8529): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059416.756:8825): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059268.752:8109): avc: denied { write } for pid=26169 comm="msgr-worker-2" laddr=172.21.15.174 lport=3300 faddr=172.21.15.179 fport=45460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059021.376:6845): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.757:8307): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.664:9184): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.757:9307): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6882): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.972:9127): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059329.771:8359): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.118:8058): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8904): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8004): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=48365 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059495.974:9199): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.656:8757): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.599:8390): avc: denied { open } for pid=42926 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.656:8843): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.655:9157): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059249.757:7997): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.967:9121): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059011.375:6799): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7930): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059168.905:7615): avc: denied { search } for pid=26556 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.587:8797): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.756:8868): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.656:6888): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058998.700:6709): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.656:6890): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.704:6917): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.656:8893): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059248.748:7977): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7279): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7317): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059330.005:8361): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.658:9279): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059118.497:7364): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.657:7139): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.763:8344): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9425): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6775): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.388:7733): avc: denied { read } for pid=26556 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8946): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.468:6870): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9164): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.646:8063): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.659:8431): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.563:8710): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7754): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.756:8938): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059000.346:6725): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.907:7333): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.757:8357): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059430.609:8884): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.827:8094): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059114.010:7350): avc: denied { write } for pid=78099 comm="safe_timer" path="pipe:[280149]" dev="pipefs" ino=280149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059431.376:8888): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.600:7926): avc: denied { search } for pid=26556 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.756:6920): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.659:8852): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.656:8015): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.376:7496): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=59204 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.359:8559): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059368.756:8564): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058997.638:6695): avc: denied { read } for pid=48251 comm="msgr-worker-1" path="socket:[242476]" dev="sockfs" ino=242476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.656:6766): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058997.787:6700): avc: denied { write } for pid=42926 comm="tp_osd_tp" path="pipe:[190620]" dev="pipefs" ino=190620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059171.376:7627): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[334242]" dev="sockfs" ino=334242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8134): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.864:8143): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.705:6652): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.406:6882): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.299:8700): avc: denied { use } for pid=26556 comm="log" path="pipe:[131283]" dev="pipefs" ino=131283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059268.752:8106): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059411.376:8736): avc: denied { getattr } for pid=42350 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=183109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.757:8129): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.812:8814): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.812:8815): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.367:7760): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059101.376:7255): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.656:8410): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8895): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8702): avc: denied { open } for pid=26532 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059521.376:9394): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.481:6872): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.656:8759): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.334:6666): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.883:8787): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.656:8972): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.659:7721): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.722:7303): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.656:6767): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059002.756:6758): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.757:7329): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059089.359:7204): avc: denied { read } for pid=42350 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.530:8514): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.753:7974): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8780): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059018.703:6840): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.656:8011): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.656:8412): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.659:7230): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059349.850:8463): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.401:6762): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.657:7548): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.797:9391): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.473:9359): avc: denied { search } for pid=53658 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059185.756:7743): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7542): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.757:8131): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.656:8968): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.659:8037): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7560): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059122.502:7371): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059433.656:8894): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.757:9387): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.658:8175): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059328.763:8344): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.657:7221): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.657:8415): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.757:8549): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059421.376:8832): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.657:8416): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.367:7762): avc: denied { search } for pid=34376 comm="ceph-crash" name="crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.756:7503): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.658:8989): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.756:8126): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059181.376:7689): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=56550 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.762:7082): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7795): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059181.376:7691): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[336272]" dev="sockfs" ino=336272 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.797:9392): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7718): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.756:8714): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.656:8972): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8070): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.658:8428): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059353.963:8555): avc: denied { open } for pid=98760 comm="pgrep" path="/proc/26145/status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059511.376:9297): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=51592 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059264.294:8097): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.657:8414): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8939): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059271.376:8151): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.764:8437): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059171.376:7628): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[329200]" dev="sockfs" ino=329200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8420): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8073): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.756:7741): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.657:8018): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059164.562:7579): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.657:8072): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.908:8114): avc: denied { open } for pid=42926 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059113.906:7349): avc: denied { search } for pid=88683 comm="pgrep" name="26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7274): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.658:7557): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.367:6667): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7795): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.642:8492): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059087.475:7196): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.660:7292): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6734): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058995.066:6662): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.656:6766): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.486:7259): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059515.757:9348): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.777:8039): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059411.376:8741): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=55807 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.771:8359): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059093.658:7225): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8977): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.756:7240): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.658:7564): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8778): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.659:6910): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058998.700:6709): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.953:8695): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.767:8551): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.572:7266): avc: denied { write } for pid=26556 comm="msgr-worker-1" laddr=172.21.15.174 lport=57240 faddr=172.21.15.174 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.797:9391): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059089.359:7204): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.654:8391): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059535.297:9444): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.658:8081): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059438.784:8957): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.473:9359): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8071): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.717:7232): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059122.502:7371): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059513.657:9324): avc: denied { read } for pid=35192 comm="node_exporter" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.600:7926): avc: denied { search } for pid=26556 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9414): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.382:6865): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.001:9303): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059167.280:7605): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.996:8479): avc: denied { write } for pid=59157 comm="tp_osd_tp" path="pipe:[226148]" dev="pipefs" ino=226148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.756:6921): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6776): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.036:7485): avc: denied { read } for pid=42926 comm="msgr-worker-2" path="socket:[278966]" dev="sockfs" ino=278966 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.852:8141): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.653:8316): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.661:8865): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058999.395:6714): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.757:8940): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.756:6669): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.755:7079): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.903:7571): avc: denied { open } for pid=42926 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6731): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.367:7759): avc: denied { dac_read_search } for pid=34376 comm="ceph-crash" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6780): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059348.249:8459): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.376:9294): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7557): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8976): avc: denied { read } for pid=35192 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.635:6641): avc: denied { append } for pid=53658 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059116.756:7359): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7130): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.864:8143): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.792:9187): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.667:7151): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.131:6863): avc: denied { read } for pid=53658 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.218:6813): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8525): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059089.478:7207): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.658:7794): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059008.396:6797): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059517.177:9367): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.605:8450): avc: denied { read } for pid=26556 comm="mgr-fin" name="localtime" dev="overlay" ino=265530 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8703): avc: denied { search } for pid=26532 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059523.657:9410): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059348.249:8458): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.151:8339): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9330): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059090.593:7210): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6906): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059101.376:7257): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[322869]" dev="sockfs" ino=322869 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6729): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059254.757:8041): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059079.408:7056): avc: denied { read } for pid=75544 comm="msgr-worker-1" path="pipe:[279729]" dev="pipefs" ino=279729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6777): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.376:8486): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059114.010:7353): avc: denied { read } for pid=26169 comm="msgr-worker-0" path="socket:[281716]" dev="sockfs" ino=281716 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.756:9382): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.741:7973): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { getattr } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058999.756:6720): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059182.126:7696): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.697:8931): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.659:9281): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9161): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9117): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.658:9274): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8774): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.756:9382): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.658:7719): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.701:6792): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8966): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[388758]" dev="sockfs" ino=388758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.656:7538): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.656:8757): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.796:9333): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7064): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.660:7296): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059413.656:8759): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.919:7335): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059166.566:7601): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.396:6866): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.036:7486): avc: denied { append } for pid=59157 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9116): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.923:7650): avc: denied { open } for pid=91878 comm="pgrep" path="/proc/26145/status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.756:8086): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.659:8037): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059496.430:9204): avc: denied { write } for pid=26556 comm="msgr-worker-1" laddr=172.21.15.174 lport=47538 faddr=172.21.15.174 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059113.906:7349): avc: denied { open } for pid=88683 comm="pgrep" path="/proc/26169/status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059262.899:8056): avc: denied { write } for pid=42926 comm="msgr-worker-0" laddr=172.21.15.174 lport=6802 faddr=172.21.15.179 fport=47602 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.645:8452): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059331.740:8397): avc: denied { write } for pid=42926 comm="msgr-worker-2" laddr=172.21.15.174 lport=6808 faddr=172.21.15.179 fport=38606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.660:8990): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7638): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.705:6653): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059162.560:7515): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.842:8945): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.757:7159): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.657:8021): avc: denied { read } for pid=35192 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.757:8129): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.756:9384): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.703:6840): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8766): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.756:8468): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059441.376:8962): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9407): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.756:8561): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.842:8945): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059517.177:9366): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.505:8402): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.756:6670): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059331.376:8372): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[366949]" dev="sockfs" ino=366949 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.456:6839): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8530): avc: denied { read } for pid=35192 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.505:8400): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059416.600:8823): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059511.376:9298): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[407689]" dev="sockfs" ino=407689 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.756:6671): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.969:9123): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059369.403:8570): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058995.061:6661): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.667:8405): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059166.566:7603): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.367:7759): avc: denied { search } for pid=34376 comm="ceph-crash" name="var" dev="sda1" ino=1444314 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c444,c725 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059181.364:7683): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059249.757:7998): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.776:8497): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059368.770:8568): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059114.010:7352): avc: denied { write } for pid=78099 comm="msgr-worker-2" laddr=172.21.15.174 lport=58224 faddr=172.21.15.174 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059031.376:6932): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8907): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.756:9306): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059262.899:8053): avc: denied { write } for pid=42926 comm="tp_osd_tp" path="pipe:[190620]" dev="pipefs" ino=190620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.773:8471): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.756:8716): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.347:7673): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.656:7125): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.658:8035): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.696:8560): avc: denied { read } for pid=59157 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059415.273:8818): avc: denied { write } for pid=26169 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9170): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.656:7215): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9409): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7930): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.658:8775): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.963:8555): avc: denied { read } for pid=98760 comm="pgrep" name="status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.657:8762): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059499.079:9243): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.645:8060): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.764:8437): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059011.375:6803): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=34696 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.614:9301): avc: denied { append } for pid=53658 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.131:8860): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.659:8083): avc: denied { fork } for pid=35192 comm="node_exporter" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.401:6761): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.644:7927): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059328.763:8343): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.658:8773): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.260:8291): avc: denied { write } for pid=26169 comm="safe_timer" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.479:7312): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7554): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.388:7734): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059248.748:7977): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.756:7607): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059001.376:6730): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8423): avc: denied { read } for pid=35192 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.376:8482): avc: denied { getattr } for pid=42350 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=183109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.376:8487): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=34350 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.660:7292): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.756:8548): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.657:8415): avc: denied { read } for pid=35192 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058997.638:6696): avc: denied { read } for pid=42926 comm="msgr-worker-0" path="socket:[238424]" dev="sockfs" ino=238424 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7135): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.658:8174): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7754): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059496.752:9211): avc: denied { read } for pid=42926 comm="msgr-worker-2" path="socket:[239023]" dev="sockfs" ino=239023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059258.750:8048): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8935): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059421.376:8838): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[391171]" dev="sockfs" ino=391171 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.703:6841): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8896): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.864:8144): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.659:7231): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059333.657:8415): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8156): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.757:6674): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059082.774:7116): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.757:7943): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7635): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.378:7052): avc: denied { open } for pid=48251 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.757:8940): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9331): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059163.656:7538): avc: denied { search } for pid=35192 comm="node_exporter" name="diff" dev="sda1" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059162.280:7511): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7790): avc: denied { read } for pid=35192 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.715:7153): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059171.376:7622): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8426): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.659:9180): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9166): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.757:7508): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.812:8815): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.722:7300): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.656:7629): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9323): avc: denied { read } for pid=35192 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7798): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.794:9241): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6778): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.656:8842): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059008.396:6797): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.757:8131): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.403:6867): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.722:7299): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.797:9390): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.127:8698): avc: denied { read } for pid=26556 comm="mgr-fin" name="lib" dev="overlay" ino=265761 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058995.589:6663): avc: denied { read } for pid=26556 comm="mgr-fin" name="localtime" dev="overlay" ino=265530 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8018): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8911): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8135): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059516.877:9362): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059412.932:8755): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.656:7269): avc: denied { search } for pid=35192 comm="node_exporter" name="diff" dev="sda1" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.656:7782): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8000): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.376:9299): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[410715]" dev="sockfs" ino=410715 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.382:6864): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.093:6810): avc: denied { write } for pid=53658 comm="msgr-worker-1" laddr=172.21.15.174 lport=6822 faddr=172.21.15.179 fport=40868 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.662:8543): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059031.376:6936): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9161): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6769): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { getattr } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.657:7136): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.031:9136): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.715:7153): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8424): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.575:8711): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059512.001:9304): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059188.737:7769): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.756:9227): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.656:6889): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.756:8125): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.767:8551): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.685:8928): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.040:9439): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.656:6763): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059029.359:6928): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059168.907:7616): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/lib64/python3.6" dev="sda1" ino=919887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059018.456:6838): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059500.614:9245): avc: denied { search } for pid=26556 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9164): avc: denied { read } for pid=35192 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9324): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.656:6890): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.657:7224): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.635:6642): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.656:8522): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.779:8784): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.658:8036): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8771): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059495.042:9197): avc: denied { read } for pid=26556 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.000:9302): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.919:7335): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059185.756:7745): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.468:6869): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.756:8124): avc: denied { search } for pid=41684 comm="grafana-server" name="dashboards" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.756:9386): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7553): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059079.474:7062): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059181.364:7684): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.740:7680): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.406:6882): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.757:8549): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9127): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059501.376:9250): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059516.473:9359): avc: denied { open } for pid=53658 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.476:6831): avc: denied { read } for pid=48251 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6776): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.731:7323): avc: denied { unlink } for pid=26169 comm="rocksdb:high0" name="000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6881): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.657:7282): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7134): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059185.756:7744): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.779:8784): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.656:8159): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.908:8114): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.658:8081): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059019.400:6843): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.662:8540): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7147): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059350.757:8469): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7562): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7128): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.130:7750): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.908:8113): avc: denied { open } for pid=42926 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.763:8343): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.505:6873): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059191.376:7775): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.757:6835): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7702): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.163:8341): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.001:8854): avc: denied { read } for pid=48251 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.398:6826): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.657:6903): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.756:7503): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.756:7504): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059328.763:8345): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9408): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.658:9420): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.505:8512): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.572:7265): avc: denied { read } for pid=26556 comm="msgr-worker-1" path="pipe:[142322]" dev="pipefs" ino=142322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.656:7630): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.736:7238): avc: denied { read } for pid=26169 comm="rocksdb:high0" name="000016.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.756:8085): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059412.575:8748): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.359:8122): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.473:9360): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.767:7186): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8134): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059350.016:8464): avc: denied { write } for pid=26532 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.656:7710): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.757:7746): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.563:8709): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6881): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.756:8867): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059501.376:9258): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[403431]" dev="sockfs" ino=403431 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8017): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.657:7637): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.963:8557): avc: denied { read } for pid=98760 comm="pgrep" name="status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7328): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059370.374:8576): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.756:7506): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.883:7765): avc: denied { open } for pid=48251 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.713:8354): avc: denied { append } for pid=59157 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8912): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.722:7301): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.757:6923): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/cephfs-overview.json" dev="overlay" ino=1444455 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7278): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/class/net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6768): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.976:8789): avc: denied { open } for pid=101961 comm="pgrep" path="/proc/26145/status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.660:8991): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059535.285:9443): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7803): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059534.917:9442): avc: denied { read } for pid=59157 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9325): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.656:9163): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.548:7175): avc: denied { read } for pid=26556 comm="msgr-worker-2" path="socket:[238434]" dev="sockfs" ino=238434 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.657:8163): avc: denied { read } for pid=35192 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8760): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8005): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[347885]" dev="sockfs" ino=347885 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.656:9266): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7715): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.705:6652): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059350.937:8475): avc: denied { read } for pid=48251 comm="msgr-worker-2" path="socket:[242559]" dev="sockfs" ino=242559 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.587:8797): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.753:7974): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.656:7123): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.779:8785): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059249.757:7998): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.644:7930): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.756:8712): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.756:9385): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059513.796:9334): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.659:7722): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7544): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059162.559:7514): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059188.737:7768): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.657:7140): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.660:8992): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059181.349:7682): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8780): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.756:8009): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.756:8869): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059411.376:8736): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059516.287:9356): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="socket:[167776]" dev="sockfs" ino=167776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7064): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.656:8519): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7541): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.715:7152): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.656:9267): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.635:6640): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059191.376:7770): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.151:8339): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.917:9441): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7313): avc: denied { create } for pid=26169 comm="rstore_compact" name="000018.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.658:8851): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.756:7081): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="sda1" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059016.441:6817): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.757:7331): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.557:7501): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.657:8170): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.655:9160): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.774:7084): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.701:6794): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.919:7335): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.756:8302): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.131:6863): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.756:6672): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.852:8141): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.757:9388): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.408:7058): avc: denied { write } for pid=75544 comm="msgr-worker-1" laddr=172.21.15.174 lport=44830 faddr=172.21.15.174 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.864:8143): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.129:8699): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.658:8177): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8763): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.783:8915): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.369:6836): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059000.358:6726): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.751:8084): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.398:6740): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059081.375:7113): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[319579]" dev="sockfs" ino=319579 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.756:7155): avc: denied { search } for pid=41684 comm="grafana-server" name="dashboards" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059185.388:7734): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.738:7239): avc: denied { remove_name } for pid=26169 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.623:8008): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059341.376:8441): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059344.756:8442): avc: denied { search } for pid=41684 comm="grafana-server" name="diff" dev="sda1" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.660:9181): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059180.382:7681): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.757:7746): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.756:7156): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059008.396:6798): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.655:9160): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059099.778:7249): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.345:7728): avc: denied { append } for pid=53658 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.408:8795): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.658:8987): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.701:6646): avc: denied { write } for pid=26169 comm="safe_timer" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059176.756:7665): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.001:9303): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059244.093:7923): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.756:8406): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.072:8858): avc: denied { write } for pid=77102 comm="safe_timer" path="pipe:[280817]" dev="pipefs" ino=280817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7551): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6769): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059011.375:6802): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.656:9313): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9409): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.622:8300): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6768): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.036:7483): avc: denied { read } for pid=78099 comm="msgr-worker-1" path="pipe:[280148]" dev="pipefs" ino=280148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059421.376:8837): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[385643]" dev="sockfs" ino=385643 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7127): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.572:7264): avc: denied { write } for pid=26556 comm="safe_timer" path="pipe:[142322]" dev="pipefs" ino=142322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8976): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.656:8971): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8157): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8158): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.757:7611): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="sda1" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.657:7633): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9418): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.722:7299): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.756:7326): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059086.756:7191): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.420:6815): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7313): avc: denied { add_name } for pid=26169 comm="rstore_compact" name="000018.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8701): avc: denied { read } for pid=26532 comm="conmon" path="pipe:[131283]" dev="pipefs" ino=131283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059080.592:7074): avc: denied { search } for pid=26556 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.657:8024): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.481:7121): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059517.177:9367): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8779): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059535.297:9444): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.792:9187): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.653:8315): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.656:8758): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.656:7215): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8907): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.792:9188): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8703): avc: denied { search } for pid=26532 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059262.899:8054): avc: denied { write } for pid=59157 comm="tp_osd_tp" path="pipe:[226148]" dev="pipefs" ino=226148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7142): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.757:8129): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.656:8522): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059430.673:8885): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059347.201:8455): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059089.478:7207): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.657:8016): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8761): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.758:7306): avc: denied { open } for pid=42926 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.376:8483): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.646:8063): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.043:6858): avc: denied { write } for pid=59157 comm="msgr-worker-2" laddr=172.21.15.174 lport=6832 faddr=172.21.15.179 fport=47936 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7065): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.658:9275): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059436.017:8951): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059082.504:7115): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7553): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059350.756:8467): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.779:8785): avc: denied { search } for pid=26169 comm="safe_timer" name="diff" dev="sda1" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059534.037:9436): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7285): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { getattr } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.969:9124): avc: denied { read } for pid=48251 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7802): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9323): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6769): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.741:7937): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.757:7329): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.083:6862): avc: denied { read } for pid=42926 comm="msgr-worker-2" path="pipe:[190622]" dev="pipefs" ino=190622 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059496.084:9203): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8003): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059495.042:9197): avc: denied { open } for pid=26556 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.696:9237): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7704): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7150): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.756:8128): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.757:9311): avc: denied { read } for pid=41684 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059016.420:6814): avc: denied { open } for pid=26556 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8498): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059093.657:7217): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.386:9357): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059166.566:7601): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059416.600:8823): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059327.653:8313): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.963:8555): avc: denied { search } for pid=98760 comm="pgrep" name="26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.658:8176): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.505:6874): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.043:6856): avc: denied { append } for pid=48251 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.092:6808): avc: denied { read } for pid=42926 comm="msgr-worker-2" path="socket:[243962]" dev="sockfs" ino=243962 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.756:7648): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.244:7487): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.653:8314): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059271.376:8155): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[358991]" dev="sockfs" ino=358991 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.376:9296): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.043:9138): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.758:8132): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.376:8489): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[376842]" dev="sockfs" ino=376842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6894): avc: denied { read } for pid=35192 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.398:6824): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.976:8790): avc: denied { getattr } for pid=101961 comm="pgrep" path="/proc/26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8162): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8964): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8768): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7712): avc: denied { read } for pid=35192 comm="node_exporter" name="eno1" dev="sysfs" ino=35391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.657:8166): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.658:8035): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.656:8411): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.656:7126): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.004:9432): avc: denied { search } for pid=105608 comm="pgrep" name="26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059081.375:7111): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[319579]" dev="sockfs" ino=319579 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.043:6857): avc: denied { write } for pid=48251 comm="msgr-worker-2" laddr=172.21.15.174 lport=6814 faddr=172.21.15.179 fport=54994 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058998.334:6702): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9316): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.505:6875): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059347.656:8457): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059243.872:7915): avc: denied { append } for pid=26556 comm="log" path="/var/log/ceph/ceph-mgr.smithi174.qdsmzv.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7138): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.722:7302): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.729:7936): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059438.784:8956): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.757:8940): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.376:7492): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059246.377:7964): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.757:9120): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.656:9167): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.352:7674): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059430.609:8884): avc: denied { search } for pid=26556 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059498.776:9239): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059369.832:8572): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059517.189:9370): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059111.376:7345): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[320263]" dev="sockfs" ino=320263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.656:7124): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8897): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9321): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.151:8338): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.043:6860): avc: denied { write } for pid=53658 comm="msgr-worker-1" laddr=172.21.15.174 lport=6822 faddr=172.21.15.179 fport=40800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.007:9350): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.757:7509): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8019): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.187:8399): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.657:7129): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.756:8467): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.653:8315): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.657:7718): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.656:7213): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059271.376:8148): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.704:6916): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.657:7276): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.287:9353): avc: denied { write } for pid=26169 comm="safe_timer" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.656:7537): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.658:8173): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7752): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.657:7553): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.656:7629): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9411): avc: denied { read } for pid=35192 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8935): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059011.375:6805): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[295397]" dev="sockfs" ino=295397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.704:6916): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059250.756:7999): avc: denied { append } for pid=26556 comm="log" path="/var/log/ceph/ceph-mgr.smithi174.qdsmzv.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7715): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.600:7926): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.756:9228): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.656:8894): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.756:7647): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.049:7749): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059330.163:8362): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.141:9290): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.657:8168): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.736:7725): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8418): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059182.757:7699): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.040:9438): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059248.748:7979): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.575:9105): avc: denied { append } for pid=53658 comm="log" path="/var/log/ceph/ceph-osd.2.log" dev="sda1" ino=395846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059116.756:7360): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8973): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.756:7942): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.658:7286): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059348.766:8460): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059093.657:7223): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.657:7137): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059100.594:7250): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059251.377:8007): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.756:8010): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059093.659:7230): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.717:7232): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.575:8711): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.656:9161): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059416.588:8822): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.704:6917): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059089.359:7206): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059181.376:7686): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.796:9333): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.218:6812): avc: denied { write } for pid=26169 comm="safe_timer" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.656:9405): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.131:6863): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.969:9124): avc: denied { open } for pid=48251 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7280): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.653:8316): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.131:6863): avc: denied { open } for pid=53658 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058999.756:6721): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059421.376:8830): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8702): avc: denied { search } for pid=26532 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.657:8981): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.501:8509): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.757:9307): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.660:7294): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8135): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.657:7283): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9113): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8762): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7064): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.657:8167): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.658:7640): avc: denied { read } for pid=35192 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.658:8536): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9126): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059248.748:7976): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.827:8094): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059499.981:9244): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059001.398:6740): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059113.906:7348): avc: denied { getattr } for pid=88683 comm="pgrep" path="/proc/26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059174.448:7655): avc: denied { read } for pid=53658 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.656:9403): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8498): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059350.937:8474): avc: denied { read } for pid=53658 comm="msgr-worker-0" path="socket:[243123]" dev="sockfs" ino=243123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.659:9176): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.043:6859): avc: denied { write } for pid=42926 comm="msgr-worker-0" laddr=172.21.15.174 lport=6806 faddr=172.21.15.179 fport=60590 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059088.716:7199): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.757:7943): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059166.387:7600): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.093:6809): avc: denied { write } for pid=42926 comm="msgr-worker-2" laddr=172.21.15.174 lport=6808 faddr=172.21.15.179 fport=38606 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7317): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.587:8797): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059026.367:6927): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7563): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8498): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059515.738:9344): avc: denied { read } for pid=48251 comm="msgr-worker-2" path="socket:[235180]" dev="sockfs" ino=235180 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8032): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8529): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059004.370:6795): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.661:8865): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9427): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8901): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7717): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059188.737:7768): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7797): avc: denied { read } for pid=35192 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35590 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8527): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.756:7607): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059011.375:6801): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.913:8923): avc: denied { read } for pid=59157 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9314): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.757:9387): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.757:8717): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059335.654:8439): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059116.991:7363): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8973): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.812:8816): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059326.367:8298): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059429.113:8883): avc: denied { read } for pid=59157 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.953:8695): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.976:8789): avc: denied { search } for pid=101961 comm="pgrep" name="26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059438.784:8954): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.261:8294): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="socket:[167776]" dev="sockfs" ino=167776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.659:9176): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.730:7316): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059328.151:8340): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7800): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.576:8926): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8497): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.656:6764): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059411.377:8744): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.770:8569): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.756:7744): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.657:7786): avc: denied { read } for pid=35192 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.907:7333): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8495): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.376:7493): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9429): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.376:8490): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059438.784:8954): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059162.559:7514): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.656:8064): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.959:7510): avc: denied { read } for pid=48251 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.660:8990): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.756:7938): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059089.731:7208): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7787): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.505:8513): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7317): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.756:8547): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.127:8698): avc: denied { read } for pid=26556 comm="mgr-fin" name="lib" dev="sda1" ino=265761 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.655:9159): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7709): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.919:7335): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059002.756:6758): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059438.784:8954): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059084.767:7186): avc: denied { read } for pid=53658 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059495.054:9198): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059268.747:8101): avc: denied { append } for pid=48251 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059174.584:7659): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059254.756:8040): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059187.383:7767): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.811:8942): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.010:9374): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.656:7700): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.653:8316): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059098.871:7243): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059166.367:7599): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.723:7237): avc: denied { getattr } for pid=26169 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7543): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.757:6675): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-sync-overview.json" dev="overlay" ino=1444464 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6898): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.013:8855): avc: denied { write } for pid=59157 comm="msgr-worker-1" laddr=172.21.15.174 lport=41516 faddr=172.21.15.174 fport=6808 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8772): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6899): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.164:8347): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059086.756:7192): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.658:9277): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9414): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8161): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.963:7653): avc: denied { read } for pid=42926 comm="msgr-worker-0" path="socket:[240509]" dev="sockfs" ino=240509 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.756:8302): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059268.752:8108): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.657:8847): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8978): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.756:7507): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.796:9333): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6893): avc: denied { read } for pid=35192 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.575:8711): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.244:7488): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059339.772:8440): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058995.589:6663): avc: denied { search } for pid=26556 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059101.376:7256): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=35762 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7132): avc: denied { read } for pid=35192 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058997.638:6697): avc: denied { write } for pid=42926 comm="msgr-worker-1" laddr=172.21.15.174 lport=6808 faddr=172.21.15.179 fport=38514 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.376:9293): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059243.994:7921): avc: denied { open } for pid=48251 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9320): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059114.010:7351): avc: denied { read } for pid=78099 comm="msgr-worker-2" path="pipe:[280149]" dev="pipefs" ino=280149 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.755:7079): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7065): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.659:8783): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.757:7943): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.132:7753): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.649:8864): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.622:8300): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7065): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059162.560:7515): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059244.093:7923): avc: denied { read } for pid=59157 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.757:9231): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059495.054:9198): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.657:7789): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059162.559:7514): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.757:8129): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059517.177:9368): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.756:8715): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059093.657:7217): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.659:8433): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.757:8130): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.660:9182): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059174.582:7656): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.657:8765): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059515.737:9343): avc: denied { write } for pid=48251 comm="msgr-worker-0" laddr=172.21.15.174 lport=50908 faddr=172.21.15.179 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.832:8878): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.635:6642): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.656:8014): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.731:7323): avc: denied { remove_name } for pid=26169 comm="rocksdb:high0" name="000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.073:7310): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.376:8482): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059088.716:7200): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8427): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.704:6917): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.756:8563): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059019.400:6843): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058999.395:6712): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.977:8791): avc: denied { search } for pid=101961 comm="pgrep" name="26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7794): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059423.657:8844): avc: denied { read } for pid=35192 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7313): avc: denied { write } for pid=26169 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.635:6642): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059494.756:9193): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="sda1" ino=1444456 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059017.756:6833): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.656:7630): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.592:7074): avc: denied { search } for pid=26556 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8779): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059191.376:7774): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059171.376:7623): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8702): avc: denied { write } for pid=26532 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6778): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7793): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.572:7267): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="socket:[151276]" dev="sockfs" ino=151276 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059182.756:7698): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7716): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059521.376:9394): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058998.700:6708): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.756:8716): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.659:6911): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.969:9122): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.756:7942): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.659:8434): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.656:8972): avc: denied { read } for pid=35192 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.656:8521): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059002.756:6758): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7561): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.756:8564): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7706): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.756:8869): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.377:9300): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7791): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8498): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.642:8492): avc: denied { read } for pid=59157 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7274): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.662:8541): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.757:7610): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.127:8698): avc: denied { getattr } for pid=26556 comm="mgr-fin" name="process.py" dev="sda1" ino=918519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059021.376:6846): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7545): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.658:7226): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059174.448:7655): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.367:7759): avc: denied { dac_override } for pid=34376 comm="ceph-crash" capability=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.655:9157): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.658:8986): avc: denied { read } for pid=35192 comm="node_exporter" name="eno1" dev="sysfs" ino=35391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059346.249:8453): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059085.728:7190): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.782:8873): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7558): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.827:8093): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.758:7306): avc: denied { read } for pid=42926 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.740:7678): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059080.755:7075): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.622:8300): avc: denied { open } for pid=53658 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.837:8921): avc: denied { write } for pid=26169 comm="msgr-worker-2" laddr=172.21.15.174 lport=3300 faddr=172.21.15.179 fport=45460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8946): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.797:9393): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059086.756:7193): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059002.062:6741): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059004.370:6795): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059111.376:7342): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.505:8402): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059079.474:7062): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.656:8156): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.004:9431): avc: denied { getattr } for pid=105608 comm="pgrep" path="/proc/26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.730:7316): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059182.125:7694): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.031:9135): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.937:8477): avc: denied { write } for pid=53658 comm="msgr-worker-1" laddr=172.21.15.174 lport=6824 faddr=172.21.15.179 fport=56044 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.837:8917): avc: denied { append } for pid=26169 comm="log" path="/var/log/ceph/ceph-mon.smithi174.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8985): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059332.175:8398): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.756:6834): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.907:7333): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.225:8503): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059123.028:7372): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.685:8929): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.659:7227): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { getattr } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059352.285:8508): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8903): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.774:7084): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.962:8697): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.001:9304): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059182.504:7697): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7801): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7713): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.864:8143): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059514.004:9336): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059271.376:8150): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.004:9434): avc: denied { open } for pid=105608 comm="pgrep" path="/proc/26169/status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059411.376:8743): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[384713]" dev="sockfs" ino=384713 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9329): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.757:7508): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059243.872:7913): avc: denied { write } for pid=75092 comm="msgr-worker-0" laddr=172.21.15.174 lport=46718 faddr=172.21.15.174 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059121.003:7367): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.679:9185): avc: denied { append } for pid=42926 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8424): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.376:8488): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[375904]" dev="sockfs" ino=375904 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8019): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8027): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.756:7941): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.657:7282): avc: denied { read } for pid=35192 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.649:8863): avc: denied { search } for pid=26556 comm="safe_timer" name="diff" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.657:7790): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.376:8365): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7703): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.757:8717): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.861:6878): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.756:6673): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.757:7157): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059113.906:7349): avc: denied { read } for pid=88683 comm="pgrep" name="status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7542): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.642:8493): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058998.566:6704): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059513.657:9326): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059118.497:7365): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059423.656:8841): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8072): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.656:8843): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.655:9159): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6903): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.812:8816): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.208:7924): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.659:6913): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059333.658:8427): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.756:7940): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8077): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9173): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.767:8552): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.756:7507): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058996.756:6669): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.250:7925): avc: denied { write } for pid=26169 comm="ms_dispatch" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.659:7644): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.376:8299): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.256:7491): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059182.126:7695): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6772): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059176.756:7663): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.377:8374): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.505:8513): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.244:7487): avc: denied { read } for pid=26556 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.756:7938): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059516.473:9359): avc: denied { read } for pid=53658 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7705): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7313): avc: denied { open } for pid=26169 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9409): avc: denied { read } for pid=35192 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059521.376:9395): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7800): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7802): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059089.359:7204): avc: denied { open } for pid=42350 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.763:8344): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.736:7724): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.575:8711): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059501.376:9259): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[406552]" dev="sockfs" ino=406552 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.756:8715): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.923:7650): avc: denied { read } for pid=91878 comm="pgrep" name="status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059029.359:6928): avc: denied { open } for pid=42350 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8532): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7279): avc: denied { read } for pid=35192 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8000): avc: denied { getattr } for pid=42350 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=183109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.401:6762): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059534.037:9435): avc: denied { write } for pid=26169 comm="safe_timer" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.662:8544): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8909): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059088.716:7199): avc: denied { search } for pid=26169 comm="safe_timer" name="diff" dev="sda1" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.132:7753): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.656:8970): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.756:7741): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9423): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8764): avc: denied { read } for pid=35192 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059031.376:6937): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059515.737:9342): avc: denied { write } for pid=59157 comm="msgr-worker-0" laddr=172.21.15.174 lport=6828 faddr=172.21.15.174 fport=53752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8031): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059423.656:8841): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8896): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.832:8878): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059185.388:7735): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.659:8435): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.592:7074): avc: denied { read } for pid=26556 comm="mgr-fin" name="localtime" dev="sda1" ino=265530 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.660:6789): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059002.757:6760): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.756:8087): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9315): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.010:9372): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059080.969:7085): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.658:8082): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059084.569:7176): avc: denied { write } for pid=26556 comm="safe_timer" path="pipe:[142322]" dev="pipefs" ino=142322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8075): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059258.750:8047): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8533): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.364:7676): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.779:8784): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.756:8868): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.755:7076): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059098.723:7235): avc: denied { write } for pid=26169 comm="rstore_compact" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7133): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059418.780:8827): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.010:9371): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.657:7281): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.757:8408): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osds-overview.json" dev="overlay" ino=1444459 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { getattr } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059084.799:7189): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059511.376:9295): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.656:6765): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.757:7944): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.662:8542): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.770:8567): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.163:8341): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059268.752:8102): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.656:9267): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7712): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059438.784:8954): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.797:9390): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.476:6831): avc: denied { open } for pid=48251 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.043:9139): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.740:8396): avc: denied { read } for pid=42926 comm="msgr-worker-2" path="socket:[243962]" dev="sockfs" ino=243962 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.658:9422): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.656:6887): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9113): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059162.559:7513): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059176.757:7666): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="overlay" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.658:8988): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6896): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.303:8449): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.740:7680): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.299:8700): avc: denied { write } for pid=26556 comm="log" path="pipe:[131283]" dev="pipefs" ino=131283 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.367:7761): avc: denied { getattr } for pid=34376 comm="ceph-crash" path="/var/lib/ceph/crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.832:8877): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058997.787:6699): avc: denied { write } for pid=48251 comm="tp_osd_tp" path="pipe:[199506]" dev="pipefs" ino=199506 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.505:8511): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.600:7926): avc: denied { getattr } for pid=26556 comm="mgr-fin" name="UTC" dev="sda1" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059345.645:8452): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059271.376:8154): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[356875]" dev="sockfs" ino=356875 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6786): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059079.916:7073): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.658:8080): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.954:8696): avc: denied { open } for pid=42926 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059521.376:9402): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[410899]" dev="sockfs" ino=410899 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8020): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.756:7741): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059350.996:8480): avc: denied { write } for pid=53658 comm="tp_osd_tp" path="pipe:[219251]" dev="pipefs" ino=219251 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.977:8791): avc: denied { read } for pid=101961 comm="pgrep" name="status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9329): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.741:7937): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.132:7753): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.963:7654): avc: denied { write } for pid=42926 comm="msgr-worker-0" laddr=172.21.15.174 lport=60944 faddr=172.21.15.179 fport=6826 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.187:8399): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059512.757:9311): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.657:7792): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.378:7051): avc: denied { open } for pid=48251 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6779): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7556): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059170.757:7621): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059181.376:7690): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[339250]" dev="sockfs" ino=339250 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.642:8493): avc: denied { read } for pid=59157 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.756:6672): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.377:7499): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.587:8796): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.576:8926): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7706): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059168.702:7613): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059254.757:8041): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7796): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.656:7540): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059165.268:7580): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8067): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.657:8846): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7701): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.481:7120): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059332.757:8407): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.757:7746): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.244:7489): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059505.993:9283): avc: denied { read } for pid=26169 comm="fn_monstore" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000023.sst" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.701:6793): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.656:9313): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6882): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.756:9382): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.244:7487): avc: denied { search } for pid=26556 comm="safe_timer" name="diff" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.758:8135): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058998.346:6703): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.657:7222): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059087.475:7197): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.659:7644): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8019): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6896): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8000): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.656:9169): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.794:9240): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.656:6764): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.740:7680): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.767:8551): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.658:7643): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.657:8526): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.656:8892): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.757:8550): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.655:9159): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7714): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059191.376:7773): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.705:6651): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059081.375:7104): avc: denied { getattr } for pid=42350 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=183109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059500.614:9245): avc: denied { search } for pid=26556 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.657:6901): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.376:8364): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.756:8547): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059084.726:7180): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.587:8798): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.505:6876): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.657:8770): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.388:7733): avc: denied { open } for pid=26556 comm="safe_timer" path="/proc/meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7138): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.757:7508): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.757:8940): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8524): avc: denied { read } for pid=35192 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.600:7926): avc: denied { search } for pid=26556 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059017.398:6824): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.832:8876): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.244:7488): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059509.360:9284): avc: denied { read } for pid=42350 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.658:8079): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.659:8179): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.658:8850): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9173): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.382:6865): avc: denied { open } for pid=59157 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.642:8493): avc: denied { open } for pid=59157 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6732): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6737): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[291527]" dev="sockfs" ino=291527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.468:6869): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.599:8390): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.812:8816): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059114.491:7354): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059510.565:9289): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.657:8848): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.797:9390): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059433.837:8918): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.697:8123): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059021.702:6852): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7715): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059174.781:7660): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6879): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059501.376:9257): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=53274 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9319): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.757:7157): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9328): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.770:8568): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.969:8311): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8896): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059327.653:8315): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.657:8982): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.656:7784): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.657:9271): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7546): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.376:7497): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[335890]" dev="sockfs" ino=335890 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8946): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059497.978:9233): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059098.723:7235): avc: denied { add_name } for pid=26169 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059243.872:7914): avc: denied { read } for pid=26556 comm="msgr-worker-2" path="socket:[275876]" dev="sockfs" ino=275876 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7146): avc: denied { read } for pid=35192 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35590 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.656:8410): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7794): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.300:8703): avc: denied { write } for pid=26532 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059512.757:9308): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.657:6895): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.659:6912): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8158): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8771): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.658:8988): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.660:8993): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059111.376:7339): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059017.398:6827): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.485:8708): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059430.710:8886): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.661:8539): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.576:8926): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059165.280:7581): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8974): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.757:8357): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9114): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.734:7645): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8075): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.376:8484): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059248.748:7978): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8777): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.757:9118): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.456:6838): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059080.755:7075): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.659:7802): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059347.201:8456): avc: denied { open } for pid=48251 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.376:6668): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7564): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.656:8520): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8162): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7790): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8944): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.656:7782): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059086.811:7195): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.656:8970): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.978:9234): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059534.004:9432): avc: denied { read } for pid=105608 comm="pgrep" name="status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.659:7721): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059535.297:9444): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059418.780:8828): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6902): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.903:7571): avc: denied { read } for pid=42926 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.010:9374): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059433.658:8910): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059164.562:7579): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059509.360:9286): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8945): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059497.978:9236): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.658:7145): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.635:6640): avc: denied { read } for pid=53658 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8419): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9127): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.661:7297): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.367:7759): avc: denied { read } for pid=34376 comm="ceph-crash" name="crash" dev="dm-4" ino=8388736 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.756:8306): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.656:8014): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.376:7492): avc: denied { getattr } for pid=42350 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=183109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.380:8680): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.653:8313): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059248.748:7977): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.656:7780): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.660:8990): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.757:8307): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.758:8134): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.756:7503): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8430): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu/cpu0/topology/physical_package_id" dev="sysfs" ino=28908 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.658:7286): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.756:7080): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.700:6645): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059521.376:9398): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058998.700:6709): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.656:8894): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058998.700:6708): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.788:7764): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.756:7939): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.658:7286): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.752:8105): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059330.163:8363): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059002.756:6759): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059348.766:8460): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.757:7746): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.569:7178): avc: denied { write } for pid=26556 comm="msgr-worker-1" laddr=172.21.15.174 lport=57240 faddr=172.21.15.174 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059021.376:6847): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.376:8369): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8426): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8530): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.757:6674): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.756:9117): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.657:6894): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.656:7126): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6903): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.334:6666): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059191.376:7771): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.605:8450): avc: denied { search } for pid=26556 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.732:7567): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059179.364:7675): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7324): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9411): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6881): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059098.723:7235): avc: denied { create } for pid=26169 comm="rstore_compact" name="000015.log" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6738): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[293755]" dev="sockfs" ino=293755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.441:6817): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.660:6788): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.560:6819): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059243.872:7912): avc: denied { read } for pid=75092 comm="msgr-worker-0" path="pipe:[274701]" dev="pipefs" ino=274701 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.656:8012): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059101.376:7254): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.622:8301): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.031:9136): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059090.835:7211): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.378:7050): avc: denied { append } for pid=48251 comm="log" path="/var/log/ceph/ceph-osd.1.log" dev="sda1" ino=395844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.755:7075): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9126): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.658:8420): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8420): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059265.645:8098): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.722:7299): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.963:8556): avc: denied { getattr } for pid=98760 comm="pgrep" path="/proc/26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7636): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059181.364:7683): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.381:7729): avc: denied { write } for pid=59157 comm="safe_timer" path="pipe:[226150]" dev="pipefs" ino=226150 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059100.895:7251): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.656:7631): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7795): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.657:8414): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059082.504:7115): avc: denied { search } for pid=41684 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059423.656:8840): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.741:7304): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.645:8060): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059268.752:8102): avc: denied { search } for pid=26169 comm="safe_timer" name="diff" dev="sda1" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059515.756:9345): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.701:6649): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="socket:[167776]" dev="sockfs" ino=167776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.622:9107): avc: denied { read } for pid=26556 comm="msgr-worker-1" path="pipe:[142322]" dev="pipefs" ino=142322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059430.834:8887): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.777:8038): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059179.740:7679): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.644:7929): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.757:7329): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.907:7334): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059243.994:7921): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9319): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7328): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059249.757:7997): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.657:8974): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.470:8684): avc: denied { read } for pid=75544 comm="msgr-worker-1" path="pipe:[279729]" dev="pipefs" ino=279729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8028): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7141): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.129:8699): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/lib64/python3.6" dev="sda1" ino=919887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059501.431:9260): avc: denied { write } for pid=26556 comm="msgr-worker-1" laddr=172.21.15.174 lport=47538 faddr=172.21.15.174 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8524): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.043:6854): avc: denied { read } for pid=42926 comm="msgr-worker-1" path="socket:[238421]" dev="sockfs" ino=238421 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8781): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059273.658:8173): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.756:9386): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.656:9265): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.470:8688): avc: denied { read } for pid=42926 comm="msgr-worker-1" path="socket:[273407]" dev="sockfs" ino=273407 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.753:7974): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.755:7078): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.004:9433): avc: denied { getattr } for pid=105608 comm="pgrep" path="/proc/26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7314): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.923:7652): avc: denied { read } for pid=91878 comm="pgrep" name="status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.004:9432): avc: denied { open } for pid=105608 comm="pgrep" path="/proc/26145/status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.734:7646): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.177:9367): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7709): avc: denied { read } for pid=35192 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058998.700:6708): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.043:9138): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.470:8690): avc: denied { append } for pid=42926 comm="log" path="/var/log/ceph/ceph-osd.0.log" dev="sda1" ino=395842 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.757:7331): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="overlay" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8983): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7930): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059017.398:6825): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.657:7552): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8002): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.656:7269): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.659:7289): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059271.376:8153): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=40301 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059165.280:7582): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059166.566:7601): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058995.589:6663): avc: denied { search } for pid=26556 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.378:7051): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.757:8871): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.657:9270): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059002.562:6757): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8523): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7549): avc: denied { read } for pid=35192 comm="node_exporter" name="eno1" dev="sysfs" ino=35391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9165): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.505:8511): avc: denied { search } for pid=41684 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.657:8526): avc: denied { read } for pid=35192 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.923:7652): avc: denied { search } for pid=91878 comm="pgrep" name="26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.752:8110): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="socket:[167776]" dev="sockfs" ino=167776 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.756:8302): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058999.756:6722): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.656:7538): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059002.757:6760): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9406): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.010:9374): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059350.937:8476): avc: denied { write } for pid=48251 comm="msgr-worker-0" laddr=172.21.15.174 lport=6814 faddr=172.21.15.179 fport=55168 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059099.480:7246): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.659:9177): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.566:7606): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000018.log" dev="dm-4" ino=139 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.381:7730): avc: denied { read } for pid=59157 comm="msgr-worker-2" path="pipe:[226150]" dev="pipefs" ino=226150 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.656:6891): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8025): avc: denied { read } for pid=35192 comm="node_exporter" name="xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.757:8565): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8901): avc: denied { read } for pid=35192 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7930): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059111.376:7343): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=51328 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.741:7937): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.756:8712): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.473:9360): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059248.748:7976): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059162.560:7515): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.831:8875): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.756:7324): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059016.830:6823): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7547): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.795:9282): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.660:8181): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.036:7484): avc: denied { write } for pid=78099 comm="msgr-worker-1" laddr=172.21.15.174 lport=44962 faddr=172.21.15.174 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8421): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.756:7080): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.871:7242): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059430.834:8887): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.657:7632): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059121.092:7368): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059270.065:8145): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059348.766:8460): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059079.474:7063): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059113.906:7347): avc: denied { read } for pid=88683 comm="pgrep" name="status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.376:7498): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[332072]" dev="sockfs" ino=332072 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.757:9120): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-details.json" dev="overlay" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7639): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059262.899:8057): avc: denied { write } for pid=59157 comm="msgr-worker-0" laddr=172.21.15.174 lport=6826 faddr=172.21.15.179 fport=43918 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.656:8521): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.635:6640): avc: denied { open } for pid=53658 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.657:8844): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.756:7155): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.919:7336): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9325): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059099.480:7247): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.782:8872): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7708): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.658:6909): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6774): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu/cpufreq/policy7/cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059174.582:7657): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.657:8766): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8774): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.401:7737): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059123.028:7372): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059327.642:8312): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.913:8923): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8496): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.972:9126): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059523.658:9419): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.656:8066): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059088.716:7199): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.656:8413): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.757:8307): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.756:8355): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7327): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.757:7943): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.141:9290): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6735): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=48745 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059174.448:7655): avc: denied { open } for pid=53658 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059411.376:8740): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.756:7745): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059090.593:7210): avc: denied { search } for pid=26556 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.657:7786): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.734:7645): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6777): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.658:8173): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059412.612:8750): avc: denied { read } for pid=26556 comm="msgr-worker-1" path="pipe:[142322]" dev="pipefs" ino=142322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6881): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059018.703:6840): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059497.756:9230): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.756:9382): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.657:8417): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.657:8166): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059029.359:6929): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.764:8437): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7140): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.644:7972): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.244:7487): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059162.560:7515): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059513.657:9317): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059416.600:8824): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.657:7135): avc: denied { read } for pid=35192 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059162.559:7512): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059535.297:9444): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.658:7793): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059347.656:8457): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.657:7550): avc: denied { read } for pid=35192 comm="node_exporter" name="sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8767): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.792:9189): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059123.028:7372): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.757:9231): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.658:9273): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7785): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.705:6653): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059248.748:7976): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059423.657:8847): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9415): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9427): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.703:6841): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9168): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8425): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.563:8709): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.953:8695): avc: denied { read } for pid=42926 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.794:9242): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.388:7734): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.656:8518): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.756:8866): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.103:9263): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.592:7074): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059099.480:7246): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059326.756:8305): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059433.657:8900): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059089.731:7208): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7554): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.656:7272): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=4026532033 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.505:8512): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.976:8788): avc: denied { getattr } for pid=101961 comm="pgrep" path="/proc/26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059268.752:8107): avc: denied { write } for pid=26169 comm="safe_timer" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.729:7935): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.645:8061): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059328.763:8346): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059412.575:8748): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059449.360:8995): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059258.750:8047): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.756:7080): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.756:7607): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7148): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6906): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059081.270:7103): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059426.984:8853): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059514.199:9340): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.797:9391): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8963): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.334:6666): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.656:7273): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.657:9269): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8782): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.705:6653): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059181.584:7693): avc: denied { append } for pid=26556 comm="log" path="/var/log/ceph/ceph-mgr.smithi174.qdsmzv.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.767:8552): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6784): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616058994.705:6652): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059121.092:7368): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059411.376:8739): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.756:9229): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.659:6911): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058999.447:6716): avc: denied { read } for pid=48251 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059262.899:8055): avc: denied { read } for pid=42926 comm="msgr-worker-0" path="pipe:[190620]" dev="pipefs" ino=190620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.656:9405): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7751): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059331.376:8371): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=35240 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8019): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.756:7506): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.777:8038): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059266.911:8099): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.756:8356): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.767:8553): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8959): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059348.249:8458): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.658:9422): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059113.906:7347): avc: denied { search } for pid=88683 comm="pgrep" name="26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059181.377:7692): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.908:8113): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.852:8140): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.963:8554): avc: denied { getattr } for pid=98760 comm="pgrep" path="/proc/26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.757:8131): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.715:7154): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.757:7157): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.273:8504): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.757:8718): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/host-details.json" dev="overlay" ino=1444456 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.658:8988): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7131): avc: denied { read } for pid=35192 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.376:8368): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.852:8141): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7637): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059411.376:8742): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[380571]" dev="sockfs" ino=380571 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059031.376:6931): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059438.784:8955): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.787:7188): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.010:9374): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.657:8978): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.659:8434): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.764:8358): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.757:7611): avc: denied { read } for pid=41684 comm="grafana-server" name="hosts-overview.json" dev="sda1" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059081.375:7112): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[314888]" dev="sockfs" ino=314888 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059494.756:9192): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.376:7494): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7551): avc: denied { read } for pid=35192 comm="node_exporter" name="arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.756:7505): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.656:8015): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.792:9186): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059368.770:8568): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.756:7080): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059411.941:8747): avc: denied { write } for pid=53658 comm="msgr-worker-2" laddr=172.21.15.174 lport=6824 faddr=172.21.15.179 fport=55794 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7275): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059349.772:8462): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059018.456:6838): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.871:7243): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7316): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059166.566:7602): avc: denied { append } for pid=26169 comm="log" path="/var/log/ceph/ceph-mon.smithi174.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.378:7052): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7547): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.756:7155): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.757:8307): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7789): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7930): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059346.367:8454): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9328): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.658:8537): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8420): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8162): avc: denied { read } for pid=35192 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7284): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059168.733:7614): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059416.588:8821): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9412): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.741:7937): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6892): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.656:7782): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7754): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059502.506:9262): avc: denied { write } for pid=42926 comm="bstore_kv_sync" path="/dev/dm-3" dev="devtmpfs" ino=106094 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fixed_disk_device_t:s0 tclass=blk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059086.756:7192): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.757:8717): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059111.376:7344): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[322130]" dev="sockfs" ino=322130 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058999.756:6722): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.376:8482): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.657:8068): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.260:8292): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8702): avc: denied { search } for pid=26532 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059079.408:7055): avc: denied { write } for pid=75544 comm="ceph_timer" path="pipe:[279729]" dev="pipefs" ino=279729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059244.093:7923): avc: denied { open } for pid=59157 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.757:7158): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059265.645:8098): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059327.653:8316): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.730:7317): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059331.376:8364): avc: denied { getattr } for pid=42350 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=183109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.757:8470): avc: denied { read } for pid=41684 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.657:7549): avc: denied { read } for pid=35192 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.163:8341): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6739): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[291527]" dev="sockfs" ino=291527 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.756:8306): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059516.473:9359): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059174.820:7661): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.756:8124): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059501.376:9251): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058995.589:6663): avc: denied { read } for pid=26556 comm="mgr-fin" name="localtime" dev="sda1" ino=265530 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059438.776:8953): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.678:6791): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.757:6676): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.656:7271): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8939): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058996.322:6664): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6897): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.656:8971): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058995.589:6663): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7285): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8703): avc: denied { sendto } for pid=26532 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059350.756:8467): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.656:8519): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8762): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.658:8034): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.657:7712): avc: denied { read } for pid=35192 comm="node_exporter" name="addr_assign_type" dev="sysfs" ino=35399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059496.779:9220): avc: denied { write } for pid=59157 comm="tp_osd_tp" path="pipe:[226148]" dev="pipefs" ino=226148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.569:7177): avc: denied { read } for pid=26556 comm="msgr-worker-1" path="pipe:[142322]" dev="pipefs" ino=142322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059021.376:6848): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059031.376:6933): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059081.375:7104): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.977:8791): avc: denied { open } for pid=101961 comm="pgrep" path="/proc/26169/status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.659:9180): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.757:8469): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.043:6855): avc: denied { read } for pid=48251 comm="msgr-worker-1" path="socket:[242476]" dev="sockfs" ino=242476 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059347.201:8456): avc: denied { read } for pid=48251 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.656:7271): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9327): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.757:9118): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.658:9332): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059423.657:8845): avc: denied { read } for pid=35192 comm="node_exporter" name="ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.660:9183): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059108.428:7338): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059111.376:7339): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059341.376:8441): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059494.756:9193): avc: denied { read } for pid=41684 comm="grafana-server" name="host-details.json" dev="sda1" ino=1444456 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059271.376:8146): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.622:9106): avc: denied { write } for pid=26556 comm="safe_timer" path="pipe:[142322]" dev="pipefs" ino=142322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.658:7642): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059411.941:8745): avc: denied { read } for pid=42926 comm="msgr-worker-2" path="socket:[239023]" dev="sockfs" ino=239023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.907:7332): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9166): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=4026531844 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8160): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.757:6674): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.685:8928): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059421.376:8835): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059111.376:7341): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.659:9175): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.783:8915): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059245.644:7928): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.382:6865): avc: denied { read } for pid=59157 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7314): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.756:8127): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059029.359:6928): avc: denied { read } for pid=42350 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.072:8859): avc: denied { read } for pid=77102 comm="msgr-worker-1" path="pipe:[280817]" dev="pipefs" ino=280817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8958): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.978:9233): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.657:7634): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.376:7492): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059331.376:8373): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[372741]" dev="sockfs" ino=372741 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.756:8087): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059429.113:8882): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.660:7295): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059175.328:7662): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059243.872:7911): avc: denied { write } for pid=75092 comm="safe_timer" path="pipe:[274701]" dev="pipefs" ino=274701 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.757:9387): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.657:8983): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.827:8094): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.505:8510): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059090.593:7210): avc: denied { search } for pid=26556 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.657:7219): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8946): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.657:8169): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.732:7568): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9173): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.473:7061): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.658:7288): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.431:9358): avc: denied { write } for pid=26556 comm="msgr-worker-1" laddr=172.21.15.174 lport=47538 faddr=172.21.15.174 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8935): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9314): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.794:9240): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.827:8094): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059326.757:8308): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.757:9118): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059263.827:8092): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9171): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.253:8288): avc: denied { append } for pid=59157 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059000.358:6726): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.187:8399): avc: denied { getattr } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.812:8815): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.635:6640): avc: denied { search } for pid=53658 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.757:8549): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.360:8348): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.659:8179): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.656:8839): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7317): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059513.657:9322): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.347:7672): avc: denied { search } for pid=53658 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059409.953:8695): avc: denied { open } for pid=42926 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.732:7567): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059179.364:7675): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7710): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7704): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.756:9385): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059255.095:8042): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6770): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8980): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8529): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7632): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.656:8759): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059081.375:7106): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059530.675:9430): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/lib64/python3.6" dev="overlay" ino=919887 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8764): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8771): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.792:9187): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.756:7741): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8909): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8762): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059165.280:7581): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.367:7759): avc: denied { search } for pid=34376 comm="ceph-crash" name="/" dev="overlay" ino=1444301 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c444,c725 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.658:9277): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.703:6841): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.675:6915): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6882): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059326.261:8293): avc: denied { write } for pid=26169 comm="msgr-worker-2" laddr=172.21.15.174 lport=3300 faddr=172.21.15.179 fport=45460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.657:9268): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8899): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.103:9263): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.244:7488): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.837:8920): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6893): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs" dev="sysfs" ino=45561 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058997.638:6694): avc: denied { read } for pid=42926 comm="msgr-worker-1" path="socket:[238421]" dev="sockfs" ino=238421 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059346.249:8453): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.767:7186): avc: denied { open } for pid=53658 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8984): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059017.756:6832): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.659:7290): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059081.375:7107): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.656:7123): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059521.376:9399): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059001.376:6733): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059099.480:7246): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.659:8178): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.163:8341): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.696:8560): avc: denied { open } for pid=59157 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.376:9292): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.908:8113): avc: denied { read } for pid=42926 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7754): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058996.756:6673): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.757:8870): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9127): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059409.470:8683): avc: denied { write } for pid=75544 comm="ceph_timer" path="pipe:[279729]" dev="pipefs" ino=279729 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059536.046:9446): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.757:7330): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/ceph-cluster.json" dev="sda1" ino=1444454 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059182.757:7699): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.010:9373): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.757:8941): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6783): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.505:6876): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9413): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.752:8103): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.658:9280): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.656:8065): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.381:7732): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="socket:[228349]" dev="sockfs" ino=228349 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.656:6767): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.756:9230): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8958): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059515.756:9346): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059496.767:9213): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.701:6648): avc: denied { write } for pid=26169 comm="msgr-worker-2" laddr=172.21.15.174 lport=3300 faddr=172.21.15.179 fport=45460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.006:9363): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9418): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.883:7245): avc: denied { append } for pid=26556 comm="log" path="/var/log/ceph/ceph-mgr.smithi174.qdsmzv.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8033): avc: denied { read } for pid=35192 comm="node_exporter" name="hwmon0" dev="sysfs" ino=35590 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6785): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6778): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.782:8873): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.779:7570): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059121.376:7369): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.657:8417): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059191.376:7772): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8533): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059162.559:7514): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059098.738:7239): avc: denied { unlink } for pid=26169 comm="rocksdb:high0" name="000012.log" dev="dm-4" ino=187 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.659:6912): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058995.589:6663): avc: denied { getattr } for pid=26556 comm="mgr-fin" name="UTC" dev="sda1" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059031.376:6938): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=55439 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.757:8470): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/osd-device-details.json" dev="sda1" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.659:8432): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.470:8686): avc: denied { write } for pid=75544 comm="msgr-worker-2" laddr=172.21.15.174 lport=50292 faddr=172.21.15.179 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059411.376:8736): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9127): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.656:8012): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059368.756:8563): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.376:8370): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7805): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059016.830:6823): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059534.004:9434): avc: denied { read } for pid=105608 comm="pgrep" name="status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.388:7733): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059262.798:8051): avc: denied { open } for pid=48251 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6783): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6901): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.752:8103): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.656:7783): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.755:7075): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059416.588:8821): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.659:7228): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.756:6669): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.656:8066): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7929): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059430.673:8885): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.767:8552): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.756:8302): avc: denied { search } for pid=41684 comm="grafana-server" name="dashboards" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059331.599:8390): avc: denied { read } for pid=42926 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.772:8360): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059243.994:7921): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.657:8979): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.388:7733): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9113): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059179.740:7680): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.010:9374): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059368.756:8562): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8961): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.658:6908): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.658:9421): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059246.367:7963): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8423): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.656:7269): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.729:7935): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059191.376:7777): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=44088 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059430.609:8884): avc: denied { search } for pid=26556 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.704:6916): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.913:8923): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.717:7232): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.757:8549): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059079.408:7057): avc: denied { write } for pid=75544 comm="msgr-worker-2" laddr=172.21.15.174 lport=50292 faddr=172.21.15.179 fport=6800 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058997.788:6701): avc: denied { read } for pid=42926 comm="msgr-worker-0" path="pipe:[190620]" dev="pipefs" ino=190620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059535.297:9445): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.792:9190): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.605:8450): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="overlay" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059022.505:6874): avc: denied { search } for pid=41684 comm="grafana-server" name="var" dev="sda1" ino=1966123 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059331.376:8366): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059031.376:6935): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.642:8492): avc: denied { open } for pid=59157 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.659:8037): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.489:6818): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.756:8086): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059521.376:9396): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.658:7640): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.660:7295): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.732:7567): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.010:9373): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.505:6875): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8006): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[354023]" dev="sockfs" ino=354023 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9416): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/stats/stats" dev="sysfs" ino=45563 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9412): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.031:9137): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.657:7218): avc: denied { read } for pid=35192 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059412.612:8749): avc: denied { write } for pid=26556 comm="safe_timer" path="pipe:[142322]" dev="pipefs" ino=142322 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059496.779:9219): avc: denied { write } for pid=42926 comm="tp_osd_tp" path="pipe:[190620]" dev="pipefs" ino=190620 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8029): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059081.375:7109): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=60002 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.656:8969): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8760): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.657:8166): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.127:8698): avc: denied { search } for pid=26556 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.797:9390): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.657:8171): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.658:7720): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059515.757:9348): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.359:8120): avc: denied { read } for pid=42350 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.658:8850): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7563): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.656:8413): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059416.756:8826): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.782:8873): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059429.113:8883): avc: denied { open } for pid=59157 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8943): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.776:8497): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.999:8817): avc: denied { append } for pid=59157 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.756:8355): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7277): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.730:7315): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.622:9109): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="socket:[151276]" dev="sockfs" ino=151276 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7634): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6880): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059171.376:7624): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059101.376:7253): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.408:8795): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059100.895:7251): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.658:9278): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059409.470:8687): avc: denied { write } for pid=75544 comm="msgr-worker-1" laddr=172.21.15.174 lport=44830 faddr=172.21.15.174 fport=6802 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.622:8300): avc: denied { read } for pid=53658 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.408:7060): avc: denied { read } for pid=42926 comm="msgr-worker-1" path="socket:[273407]" dev="sockfs" ino=273407 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.685:7502): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059081.375:7105): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059021.376:6849): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=56057 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059191.376:7770): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.659:8431): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.705:6650): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059496.779:9221): avc: denied { read } for pid=59157 comm="msgr-worker-0" path="pipe:[226148]" dev="pipefs" ino=226148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058997.638:6698): avc: denied { write } for pid=48251 comm="msgr-worker-2" laddr=172.21.15.174 lport=6814 faddr=172.21.15.179 fport=54994 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059449.360:8994): avc: denied { open } for pid=42350 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.656:8014): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7149): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9423): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.322:6665): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059262.866:8052): avc: denied { read } for pid=26556 comm="msgr-worker-0" path="socket:[240536]" dev="sockfs" ino=240536 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.923:7650): avc: denied { search } for pid=91878 comm="pgrep" name="26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058999.395:6713): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.705:6653): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.764:8438): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8914): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.010:9373): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.659:8538): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.954:8696): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.656:9404): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.762:7082): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059251.376:8001): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059000.358:6727): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059441.376:8965): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=58232 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.287:9352): avc: denied { append } for pid=26169 comm="log" path="/var/log/ceph/ceph-mon.smithi174.log" dev="sda1" ino=395815 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8533): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059330.163:8362): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.771:9238): avc: denied { open } for pid=42926 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059031.376:6934): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.757:7157): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.659:9176): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059193.659:7799): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6782): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7324): avc: denied { search } for pid=41684 comm="grafana-server" name="dashboards" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.659:7722): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.401:6761): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.657:7542): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7134): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.658:7557): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.662:6790): avc: denied { append } for pid=59157 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059165.280:7581): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9171): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059116.757:7362): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1444466 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.715:7152): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.757:7508): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059246.043:7962): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.470:8689): avc: denied { append } for pid=59157 comm="log" path="/var/log/ceph/ceph-osd.3.log" dev="sda1" ino=395848 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8133): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059441.376:8960): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7565): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059534.004:9434): avc: denied { search } for pid=105608 comm="pgrep" name="26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8030): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059421.376:8831): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.782:8874): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.261:8465): avc: denied { append } for pid=26556 comm="log" path="/var/log/ceph/ceph-mgr.smithi174.qdsmzv.log" dev="sda1" ino=395817 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.644:7972): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059328.763:8343): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.656:8968): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6879): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059411.376:8738): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.771:9238): avc: denied { read } for pid=42926 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8770): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8028): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.660:9181): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9127): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059114.491:7356): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.842:8946): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.864:8143): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.756:8355): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.658:8535): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.756:8302): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.360:8349): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.959:7510): avc: denied { open } for pid=48251 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059247.042:7968): avc: denied { open } for pid=42926 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059021.376:6851): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[299545]" dev="sockfs" ino=299545 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059515.757:9349): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/rbd-overview.json" dev="overlay" ino=1444466 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.752:8104): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059423.656:8842): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7751): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059413.658:8777): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8946): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059332.175:8398): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.127:8698): avc: denied { search } for pid=26556 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.969:9122): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059000.358:6726): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.658:6787): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059357.253:8558): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.656:6889): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.703:6842): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.757:7159): avc: denied { read } for pid=41684 comm="grafana-server" name="radosgw-overview.json" dev="sda1" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.656:7270): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059416.386:8820): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059101.376:7252): avc: denied { getattr } for pid=42350 comm="prometheus" path="/etc/hosts" dev="tmpfs" ino=183109 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8029): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.757:8870): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.656:7125): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.657:8165): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.592:7074): avc: denied { search } for pid=26556 comm="mgr-fin" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.468:6868): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.795:9282): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059352.285:8507): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059113.906:7346): avc: denied { getattr } for pid=88683 comm="pgrep" path="/proc/26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059332.187:8399): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.657:8163): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc/mc0/ce_count" dev="sysfs" ino=43818 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.762:7083): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059412.812:8754): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.656:6891): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.664:8404): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059501.322:9249): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.756:7742): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059421.376:8833): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7143): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7324): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059165.280:7581): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.657:8021): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/sockstat" dev="proc" ino=4026532060 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.658:9422): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.705:6652): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058994.701:6647): avc: denied { read } for pid=26169 comm="msgr-worker-2" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7149): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059179.364:7675): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059191.376:7776): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.662:8543): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.656:7214): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.664:8403): avc: denied { write } for pid=26169 comm="ms_dispatch" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.729:7935): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7788): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/fs/xfs/dm-4/stats/stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.563:8709): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.660:6788): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7276): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059514.351:9341): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.657:7549): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/pci0000:00/0000:00:1c.4/0000:07:00.0/net/eno1/addr_assign_type" dev="sysfs" ino=35399 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.658:8176): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.040:9437): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059167.756:7608): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058996.322:6664): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.757:9120): avc: denied { read } for pid=41684 comm="grafana-server" name="rbd-details.json" dev="sda1" ino=1444465 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059497.978:9235): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058998.700:6710): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8419): avc: denied { read } for pid=35192 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9426): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7278): avc: denied { read } for pid=35192 comm="node_exporter" name="net" dev="sysfs" ino=21519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059086.756:7193): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059011.375:6804): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[295397]" dev="sockfs" ino=295397 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058999.756:6721): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059534.522:9440): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="diff" dev="sda1" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.732:7568): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.444:6837): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7129): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.659:7804): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8973): avc: denied { read } for pid=35192 comm="node_exporter" name="mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.658:7641): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.378:7051): avc: denied { read } for pid=48251 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.576:8925): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059518.756:9383): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059329.360:8348): avc: denied { open } for pid=42350 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.642:8492): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.658:8849): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.656:8013): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.656:7270): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9162): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059018.456:6838): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7139): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.723:7236): avc: denied { open } for pid=26169 comm="rstore_compact" path="/sys/devices/virtual/block/dm-4/queue/logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.757:8309): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-detail.json" dev="sda1" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059434.685:8927): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8895): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059436.386:8952): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059513.657:9318): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.751:8084): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.658:7286): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.757:7331): avc: denied { read } for pid=41684 comm="grafana-server" name="osd-device-details.json" dev="sda1" ino=1444458 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.656:8161): avc: denied { read } for pid=35192 comm="node_exporter" name="mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.657:8979): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059181.376:7688): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.592:7074): avc: denied { getattr } for pid=26556 comm="mgr-fin" name="UTC" dev="sda1" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059353.657:8531): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.656:7783): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.658:8908): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.658:8776): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059004.370:6796): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8943): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.657:6896): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.756:7081): avc: denied { read } for pid=41684 comm="grafana-server" name="radosgw-detail.json" dev="sda1" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.658:7149): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.662:8546): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059114.491:7355): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059501.984:9261): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.657:7716): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7142): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059188.737:7768): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.662:8541): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.658:8078): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059423.657:8847): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059443.660:8992): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059080.755:7077): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8135): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059268.752:8102): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059029.359:6930): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.732:7569): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.659:9179): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059000.258:6724): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.280:7604): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8763): avc: denied { search } for pid=35192 comm="node_exporter" name="sys" dev="proc" ino=4026531854 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.043:9138): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059332.505:8401): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059501.376:9256): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.969:9123): avc: denied { open } for pid=48251 comm="safe_timer" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059171.376:7625): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=41240 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059501.376:9255): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059243.994:7921): avc: denied { read } for pid=48251 comm="osd_srv_heartbt" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.387:7763): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.827:8095): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.359:8121): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.661:8539): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.658:8175): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059179.364:7675): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.656:7780): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8906): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.659:7566): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.701:6792): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.657:9268): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.954:8696): avc: denied { read } for pid=42926 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7709): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/net/arp" dev="proc" ino=4026532043 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.705:6653): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059021.376:6850): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[301300]" dev="sockfs" ino=301300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9113): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059164.562:7579): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059433.657:8898): avc: denied { read } for pid=35192 comm="node_exporter" name="dev" dev="proc" ino=4026532020 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.376:7495): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.704:6919): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.722:7300): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.963:8557): avc: denied { search } for pid=98760 comm="pgrep" name="26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.163:8342): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059111.376:7340): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.406:6882): avc: denied { write } for pid=26145 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.656:7125): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.657:8417): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.010:9374): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.756:9115): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.659:9178): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059244.093:7922): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.757:9118): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.752:8102): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.757:8717): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.756:8124): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.774:8494): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058999.395:6712): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059333.658:8429): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059176.756:7664): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.622:8300): avc: denied { search } for pid=53658 comm="safe_timer" name="diff" dev="sda1" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6771): avc: denied { read } for pid=35192 comm="node_exporter" name="cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059496.752:9212): avc: denied { write } for pid=42926 comm="msgr-worker-1" laddr=172.21.15.174 lport=6806 faddr=172.21.15.179 fport=60512 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7064): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059329.360:8350): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.043:9138): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.645:8452): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058998.700:6711): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/LOCK" dev="dm-4" ino=133 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.919:7335): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.656:9403): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059501.376:9250): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.660:7293): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.752:8103): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.656:8756): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9174): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/hwmon/hwmon2" dev="sysfs" ino=43630 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7639): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.656:7122): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.118:8058): avc: denied { search } for pid=59157 comm="safe_timer" name="diff" dev="sda1" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059104.731:7322): avc: denied { read } for pid=26169 comm="rocksdb:high0" name="000019.sst" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.656:8521): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.658:7555): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.600:7926): avc: denied { read } for pid=26556 comm="mgr-fin" name="localtime" dev="overlay" ino=265530 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7927): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059098.723:7236): avc: denied { read } for pid=26169 comm="rstore_compact" name="logical_block_size" dev="sysfs" ino=45217 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.474:7065): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059513.032:9312): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6904): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.656:6889): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.007:9364): avc: denied { write } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000021.log" dev="dm-4" ino=141 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.658:7144): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059518.010:9371): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.657:7541): avc: denied { read } for pid=35192 comm="node_exporter" name="fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059098.723:7235): avc: denied { open } for pid=26169 comm="rstore_compact" path="/var/lib/ceph/mon/ceph-smithi174/store.db/000015.log" dev="dm-4" ino=137 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059409.953:8695): avc: denied { search } for pid=42926 comm="safe_timer" name="diff" dev="sda1" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059001.376:6736): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[293755]" dev="sockfs" ino=293755 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7788): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.644:7929): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059433.658:8913): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.657:7635): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.776:8111): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059513.657:9321): avc: denied { read } for pid=35192 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.575:8711): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059081.376:7114): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8936): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.969:9123): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8937): avc: denied { lock } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.917:9442): avc: denied { open } for pid=59157 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8132): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059433.657:8902): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.756:8713): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059088.716:7198): avc: denied { getattr } for pid=26169 comm="safe_timer" name="/" dev="dm-4" ino=128 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059116.756:7361): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9426): avc: denied { search } for pid=35192 comm="node_exporter" name="user" dev="tmpfs" ino=200 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:user_tmp_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.757:7609): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059191.376:7779): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[342090]" dev="sockfs" ino=342090 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.645:8451): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059326.756:8303): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.982:7766): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.635:6640): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059326.756:8305): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7324): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.776:9389): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.659:8180): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059268.908:8113): avc: denied { search } for pid=42926 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.205:8409): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6906): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.587:8797): avc: denied { search } for pid=26556 comm="safe_timer" name="etc" dev="sda1" ino=1442291 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.622:9108): avc: denied { write } for pid=26556 comm="msgr-worker-1" laddr=172.21.15.174 lport=57240 faddr=172.21.15.174 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9414): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.656:7540): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059193.657:7791): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.657:6898): avc: denied { read } for pid=35192 comm="node_exporter" name="stats" dev="sysfs" ino=45633 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059011.375:6800): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7325): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059497.756:9229): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.794:9241): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7131): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/edac/mc" dev="sysfs" ino=21498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059509.360:9284): avc: denied { open } for pid=42350 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.792:9186): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059166.277:7598): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.758:8134): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059491.756:9113): avc: denied { search } for pid=41684 comm="grafana-server" name="dashboards" dev="sda1" ino=1444452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059443.656:8970): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059497.054:9226): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.757:7329): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059345.605:8450): avc: denied { search } for pid=26556 comm="mgr-fin" name="/" dev="overlay" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.657:8528): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059265.645:8098): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059414.812:8816): avc: denied { write } for pid=26145 comm="conmon" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059438.784:8955): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.656:8158): avc: denied { search } for pid=35192 comm="node_exporter" name="7" dev="proc" ino=167082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.658:6908): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.756:8128): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="sda1" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059161.244:7488): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.659:8436): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.751:8084): avc: denied { search } for pid=26169 comm="safe_timer" name="var" dev="sda1" ino=1442274 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.481:6871): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059179.740:7678): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058996.756:6669): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059326.757:8309): avc: denied { read } for pid=41684 comm="grafana-server" name="radosgw-detail.json" dev="sda1" ino=1444462 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.657:7542): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8897): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.908:8114): avc: denied { read } for pid=42926 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059249.190:7995): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.658:7287): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.645:8062): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.657:8164): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059521.376:9400): avc: denied { getattr } for pid=42350 comm="prometheus" laddr=172.21.15.174 lport=44541 faddr=172.21.0.1 fport=53 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.659:7229): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.657:8166): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.658:6787): avc: denied { search } for pid=35192 comm="node_exporter" name="fs" dev="proc" ino=170521 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059031.376:6939): avc: denied { write } for pid=42350 comm="prometheus" path="socket:[301498]" dev="sockfs" ino=301498 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059271.376:8149): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.756:7941): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.027:9365): avc: denied { search } for pid=48251 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059086.757:7194): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/hosts-overview.json" dev="overlay" ino=1444457 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059511.141:9291): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059331.376:8367): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8938): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059264.294:8096): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.704:6918): avc: denied { getattr } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.658:7287): avc: denied { read } for pid=35192 comm="node_exporter" name="file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.300:8703): avc: denied { search } for pid=26532 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059120.595:7366): avc: denied { search } for pid=26556 comm="mgr-fin" name="diff" dev="sda1" ino=1442282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059492.021:9132): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059016.420:6814): avc: denied { read } for pid=26556 comm="safe_timer" name="meminfo" dev="proc" ino=4026532032 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.659:7723): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.657:8069): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.657:7221): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.273:8506): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.969:9124): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6773): avc: denied { read } for pid=35192 comm="node_exporter" name="cpuinfo_max_freq" dev="sysfs" ino=30846 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.923:7649): avc: denied { getattr } for pid=91878 comm="pgrep" path="/proc/26145" dev="proc" ino=127838 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058998.334:6702): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059162.560:7515): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059328.151:8339): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.656:9161): avc: denied { search } for pid=35192 comm="node_exporter" name="kernel" dev="proc" ino=173100 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059517.189:9369): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.656:9172): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059173.923:7652): avc: denied { open } for pid=91878 comm="pgrep" path="/proc/26169/status" dev="proc" ino=131194 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059498.794:9241): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.726:7179): avc: denied { read } for pid=26145 comm="conmon" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.666:7298): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.658:6907): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:fs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059101.376:7258): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[321907]" dev="sockfs" ino=321907 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.767:7187): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058998.700:6708): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.812:8814): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059368.757:8565): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059113.906:7347): avc: denied { open } for pid=88683 comm="pgrep" path="/proc/26145/status" dev="proc" ino=127842 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059168.933:7617): avc: denied { search } for pid=48251 comm="safe_timer" name="/" dev="overlay" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c372,c390 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7127): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.132:7753): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059079.378:7052): avc: denied { read } for pid=48251 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.487:8862): avc: denied { search } for pid=53658 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059083.657:7134): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059269.852:8142): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.388:7734): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.657:7216): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.756:7503): avc: denied { getattr } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059428.831:8875): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059098.871:7244): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059263.757:8088): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/pool-detail.json" dev="overlay" ino=1444460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059501.376:9254): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059088.716:7199): avc: denied { read } for pid=26169 comm="safe_timer" name="store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.779:8785): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8022): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.661:8865): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059423.656:8841): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.837:8919): avc: denied { write } for pid=26169 comm="safe_timer" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059348.778:8461): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059090.166:7209): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059084.726:7181): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059411.376:8737): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.656:6766): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8495): avc: denied { use } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fd permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059273.656:8159): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9428): avc: denied { search } for pid=35192 comm="node_exporter" name="containers" dev="sda1" ino=1452 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:object_r:container_var_lib_t:s0"', 'type=AVC msg=audit(1616059089.359:7205): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/queries.active" dev="dm-4" ino=158 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8023): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058996.334:6666): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="sda1" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059022.083:6861): avc: denied { write } for pid=59157 comm="tp_osd_tp" path="pipe:[226150]" dev="pipefs" ino=226150 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.697:8930): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059003.657:6782): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16416 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059167.280:7604): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.376:8482): avc: denied { search } for pid=42350 comm="prometheus" name="diff" dev="sda1" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059264.294:8097): avc: denied { open } for pid=53658 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059271.376:8147): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059449.360:8996): avc: denied { getattr } for pid=42350 comm="prometheus" path="/prometheus/wal" dev="dm-4" ino=8388752 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8017): avc: denied { search } for pid=35192 comm="node_exporter" name="1" dev="proc" ino=167064 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059326.622:8301): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059121.575:7370): avc: denied { search } for pid=59157 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.756:8124): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059492.117:9133): avc: denied { search } for pid=42926 comm="osd_srv_heartbt" name="/" dev="overlay" ino=1966148 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c4,c572 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059501.376:9252): avc: denied { create } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.656:7701): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.657:7711): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/sys/class/net/enp3s0f0" dev="sysfs" ino=37269 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.792:9186): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.359:8120): avc: denied { open } for pid=42350 comm="prometheus" path="/prometheus" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059350.606:8466): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/share/zoneinfo/UTC" dev="sda1" ino=1181445 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059183.736:7724): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059173.923:7651): avc: denied { getattr } for pid=91878 comm="pgrep" path="/proc/26169" dev="proc" ino=131158 scontext=system_u:system_r:ksmtuned_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9412): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/kernel/random/entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058999.447:6716): avc: denied { open } for pid=48251 comm="safe_timer" path="/sys/devices/system/cpu/online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059093.657:7218): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.756:6920): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059083.715:7153): avc: denied { open } for pid=26169 comm="safe_timer" path="/var/lib/ceph/mon/ceph-smithi174/store.db" dev="dm-4" ino=132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059262.798:8051): avc: denied { read } for pid=48251 comm="safe_timer" name="loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.657:8905): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.273:8505): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059161.256:7490): avc: denied { read } for pid=26556 comm="safe_timer" name="os-release" dev="overlay" ino=265548 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.381:7731): avc: denied { write } for pid=59157 comm="msgr-worker-2" laddr=172.21.15.174 lport=57606 faddr=172.21.15.174 fport=3300 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.756:8935): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.756:8127): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059534.040:9439): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059523.658:9419): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.659:6914): avc: denied { search } for pid=35192 comm="node_exporter" name="host" dev="sda1" ino=1839632 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059493.043:9138): avc: denied { open } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.401:7736): avc: denied { search } for pid=26556 comm="safe_timer" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059186.132:7754): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059416.367:8819): avc: denied { signal } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=process permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.359:8120): avc: denied { search } for pid=42350 comm="prometheus" name="/" dev="overlay" ino=1966132 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058999.396:6715): avc: denied { sendto } for pid=26145 comm="conmon" path="/run/systemd/journal/socket" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:system_r:kernel_t:s0 tclass=unix_dgram_socket permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.756:8712): avc: denied { search } for pid=41684 comm="grafana-server" name="etc" dev="sda1" ino=1966120 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059351.776:8498): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059411.941:8746): avc: denied { write } for pid=48251 comm="msgr-worker-1" laddr=172.21.15.174 lport=6816 faddr=172.21.15.179 fport=51336 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.031:9136): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.662:8544): avc: denied { search } for pid=35192 comm="node_exporter" name="lib" dev="sda1" ino=1282 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_lib_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.661:8539): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.656:7271): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059351.776:8497): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059503.658:9276): avc: denied { search } for pid=35192 comm="node_exporter" name="rpc" dev="proc" ino=4026532483 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_rpc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059104.756:7327): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059019.400:6843): avc: denied { search } for pid=26145 comm="conmon" name="systemd" dev="tmpfs" ino=16425 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:init_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059170.757:7621): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059414.812:8816): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059516.287:9355): avc: denied { write } for pid=26169 comm="msgr-worker-2" laddr=172.21.15.174 lport=3300 faddr=172.21.15.179 fport=45460 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059249.753:7996): avc: denied { search } for pid=26556 comm="safe_timer" name="/" dev="proc" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059329.360:8348): avc: denied { read } for pid=42350 comm="prometheus" name="data" dev="dm-4" ino=153 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.756:7938): avc: denied { getattr } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059493.659:9178): avc: denied { getattr } for pid=35192 comm="node_exporter" name="/" dev="tmpfs" ino=16417 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:tmpfs_t:s0 tclass=filesystem permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.972:9126): avc: denied { open } for pid=26145 comm="conmon" path="/dev/null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059031.376:6940): avc: denied { read } for pid=42350 comm="prometheus" path="socket:[302292]" dev="sockfs" ino=302292 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.658:8534): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059332.757:8407): avc: denied { read } for pid=41684 comm="grafana-server" name="ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059123.028:7373): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.656:6887): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="overlay" ino=1837661 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c231,c420 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059428.013:8856): avc: denied { read } for pid=42926 comm="msgr-worker-0" path="socket:[232107]" dev="sockfs" ino=232107 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=tcp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059021.376:6844): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059438.784:8955): avc: denied { search } for pid=26169 comm="safe_timer" name="mon.smithi174" dev="dm-4" ino=25165952 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9406): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9412): avc: denied { read } for pid=35192 comm="node_exporter" name="entropy_avail" dev="proc" ino=172105 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_kernel_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059503.103:9264): avc: denied { getattr } for pid=26556 comm="safe_timer" path="/usr/lib/os-release" dev="overlay" ino=395478 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059091.376:7212): avc: denied { search } for pid=42350 comm="prometheus" name="etc" dev="sda1" ino=1966140 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059253.657:8017): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059523.656:9405): avc: denied { read } for pid=35192 comm="node_exporter" name="stat" dev="proc" ino=167722 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.659:9424): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="devtmpfs" ino=1025 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:device_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059268.778:8112): avc: denied { append } for pid=42350 comm="prometheus" path="/prometheus/wal/00000001" dev="dm-4" ino=8388754 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c270,c414 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059023.757:6922): avc: denied { read open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="sda1" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059079.378:7051): avc: denied { search } for pid=48251 comm="safe_timer" name="diff" dev="sda1" ino=1966166 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059080.762:7082): avc: denied { search } for pid=26556 comm="safe_timer" name="libpod-bf2f60f7d83891629e115d6eea7c611b0354eeef0a7506146f01be9c55f18ede.scope" dev="cgroup" ino=7235 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059410.127:8698): avc: denied { getattr } for pid=26556 comm="mgr-fin" path="/usr/lib/python3.6/site-packages/remoto/process.py" dev="overlay" ino=918519 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c877,c989 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059114.868:7357): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="sysfs" ino=1 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059186.883:7765): avc: denied { read } for pid=48251 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059183.658:7719): avc: denied { search } for pid=35192 comm="node_exporter" name="var" dev="sda1" ino=1281 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:var_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059512.505:9305): avc: denied { search } for pid=41684 comm="grafana-server" name="/" dev="overlay" ino=1966082 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.657:7274): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/1/mounts" dev="proc" ino=171151 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059410.300:8703): avc: denied { write } for pid=26532 comm="conmon" name="socket" dev="tmpfs" ino=16706 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=sock_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059518.757:9387): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard" dev="overlay" ino=1444453 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059253.657:8024): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059521.376:9397): avc: denied { setopt } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059352.273:8505): avc: denied { read } for pid=26556 comm="safe_timer" name="memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616058994.705:6653): avc: denied { search } for pid=26145 comm="conmon" name="journal" dev="tmpfs" ino=16702 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:syslogd_var_run_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059023.657:6905): avc: denied { getattr } for pid=35192 comm="node_exporter" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059245.600:7926): avc: denied { read } for pid=26556 comm="mgr-fin" name="localtime" dev="sda1" ino=265530 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059162.559:7512): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129467]" dev="pipefs" ino=129467 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059081.375:7108): avc: denied { connect } for pid=42350 comm="prometheus" scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=udp_socket permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059182.126:7695): avc: denied { write } for pid=26145 comm="conmon" name="null" dev="devtmpfs" ino=12290 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:null_device_t:s0 tclass=chr_file permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058995.589:6663): avc: denied { search } for pid=26556 comm="mgr-fin" name="usr" dev="sda1" ino=658316 scontext=system_u:object_r:unlabeled_t:s0 tcontext=unconfined_u:object_r:container_ro_file_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059103.658:7287): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/sys/fs/file-nr" dev="proc" ino=170522 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_fs_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059103.656:7273): avc: denied { open } for pid=35192 comm="node_exporter" path="/proc/7/fd" dev="proc" ino=167723 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059434.842:8945): avc: denied { search } for pid=26145 comm="conmon" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616059163.658:7561): avc: denied { search } for pid=35192 comm="node_exporter" name="/" dev="sda1" ino=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:root_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059269.355:8118): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059333.658:8423): avc: denied { read } for pid=35192 comm="node_exporter" name="eno1" dev="sysfs" ino=35391 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059491.756:9116): avc: denied { read } for pid=41684 comm="grafana-server" path="/var/lib/grafana/grafana.db" dev="overlay" ino=1966129 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059516.473:9360): avc: denied { read } for pid=53658 comm="safe_timer" name="online" dev="sysfs" ino=35 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cpu_online_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059185.757:7747): avc: denied { open } for pid=41684 comm="grafana-server" path="/etc/grafana/dashboards/ceph-dashboard/radosgw-overview.json" dev="overlay" ino=1444463 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c316,c705 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059273.657:8172): avc: denied { search } for pid=35192 comm="node_exporter" name="net" dev="proc" ino=167088 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysctl_net_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059328.763:8343): avc: denied { search } for pid=26169 comm="safe_timer" name="/" dev="overlay" ino=1442263 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c132,c713 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059003.657:6771): avc: denied { open } for pid=35192 comm="node_exporter" path="/sys/devices/system/cpu" dev="sysfs" ino=33 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059492.585:9134): avc: denied { search } for pid=53658 comm="safe_timer" name="/" dev="overlay" ino=1966186 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c579,c755 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059523.657:9417): avc: denied { read } for pid=35192 comm="node_exporter" name="cpufreq" dev="sysfs" ino=30758 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:sysfs_t:s0 tclass=lnk_file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059353.658:8534): avc: denied { read } for pid=35192 comm="node_exporter" name="mdstat" dev="proc" ino=4026532018 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_mdstat_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059433.913:8923): avc: denied { open } for pid=59157 comm="osd_srv_heartbt" path="/proc/loadavg" dev="proc" ino=4026532031 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059163.994:7572): avc: denied { search } for pid=59157 comm="safe_timer" name="/" dev="overlay" ino=1966205 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:container_file_t:s0:c16,c328 tclass=dir permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059174.584:7658): avc: denied { write } for pid=26169 comm="fn_monstore" path="pipe:[129496]" dev="pipefs" ino=129496 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=fifo_file permissive=1 srawcon="system_u:system_r:spc_t:s0" trawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059418.780:8827): avc: denied { dac_read_search } for pid=26169 comm="safe_timer" capability=2 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:unlabeled_t:s0 tclass=capability permissive=1 srawcon="system_u:system_r:container_runtime_t:s0" trawcon="system_u:system_r:container_runtime_t:s0"', 'type=AVC msg=audit(1616058996.322:6664): avc: denied { open } for pid=26556 comm="safe_timer" path="/sys/fs/cgroup/memory/memory.limit_in_bytes" dev="cgroup" ino=7242 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:cgroup_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"', 'type=AVC msg=audit(1616059413.657:8765): avc: denied { read } for pid=35192 comm="node_exporter" name="netstat" dev="proc" ino=4026532061 scontext=system_u:object_r:unlabeled_t:s0 tcontext=system_u:object_r:proc_net_t:s0 tclass=file permissive=1 srawcon="system_u:system_r:spc_t:s0"'] |
||||||||||||||
| pass | 5975364 |
|
2021-03-17 23:54:19 | 2021-03-18 08:56:31 | 2021-03-18 09:30:50 | 0:34:19 | 0:26:53 | 0:07:26 | smithi | master | rhel | 8.3 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/classic objectstore/bluestore-comp-snappy supported-random-distro$/{rhel_8} tasks/module_selftest} | 2 |
| pass | 5975365 |
|
2021-03-17 23:54:20 | 2021-03-18 08:57:41 | 2021-03-18 09:17:41 | 0:20:00 | 0:10:04 | 0:09:56 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/classic objectstore/bluestore-basic-min-osd-mem-target openstack scheduler/dmclock_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_4M_rand_read} | 1 |
| pass | 5975366 |
|
2021-03-17 23:54:21 | 2021-03-18 08:58:12 | 2021-03-18 09:17:47 | 0:19:35 | 0:10:19 | 0:09:16 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/max-pg-per-osd.from-primary mon_election/connectivity msgr-failures/few msgr/async objectstore/bluestore-comp-zlib rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975367 |
|
2021-03-17 23:54:22 | 2021-03-18 08:58:32 | 2021-03-18 09:29:30 | 0:30:58 | 0:20:29 | 0:10:29 | smithi | master | ubuntu | 20.04 | rados/cephadm/workunits/{0-distro/ubuntu_20.04_kubic_stable mon_election/classic task/test_orch_cli} | 1 |
| pass | 5975368 |
|
2021-03-17 23:54:23 | 2021-03-18 08:59:52 | 2021-03-18 09:29:26 | 0:29:34 | 0:23:36 | 0:05:58 | smithi | master | rhel | 8.3 | rados/thrash/{0-size-min-size-overrides/3-size-2-min-size 1-pg-log-overrides/short_pg_log 2-recovery-overrides/{more-async-partial-recovery} backoff/peering ceph clusters/{fixed-2 openstack} crc-failures/default d-balancer/on mon_election/connectivity msgr-failures/osd-delay msgr/async-v2only objectstore/bluestore-stupid rados supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/cache-snaps-balanced} | 2 |
| fail | 5975369 |
|
2021-03-17 23:54:24 | 2021-03-18 09:00:23 | 2021-03-18 09:22:05 | 0:21:42 | 0:10:52 | 0:10:50 | smithi | master | ubuntu | 20.04 | rados/cephadm/with-work/{0-distro/ubuntu_20.04_kubic_testing fixed-2 mode/root mon_election/connectivity msgr/async start tasks/rados_api_tests} | 2 |
Failure Reason:
Command failed on smithi154 with status 1: 'sudo /home/ubuntu/cephtest/cephadm --image quay.ceph.io/ceph-ci/ceph:3ae49e85764e073e154cc3617a04d1d62c9897ac shell -c /etc/ceph/ceph.conf -k /etc/ceph/ceph.client.admin.keyring --fsid d8f6308e-87ca-11eb-9096-001a4aab830c -- ceph orch host ls --format=json' |
||||||||||||||
| pass | 5975370 |
|
2021-03-17 23:54:26 | 2021-03-18 09:00:23 | 2021-03-18 09:19:47 | 0:19:24 | 0:13:40 | 0:05:44 | smithi | master | rhel | 8.3 | rados/standalone/{mon_election/connectivity supported-random-distro$/{rhel_8} workloads/mgr} | 1 |
| pass | 5975371 |
|
2021-03-17 23:54:28 | 2021-03-18 09:00:44 | 2021-03-18 09:18:05 | 0:17:21 | 0:07:52 | 0:09:29 | smithi | master | centos | 8.3 | rados/singleton-nomsgr/{all/export-after-evict mon_election/classic rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975372 |
|
2021-03-17 23:54:29 | 2021-03-18 09:01:14 | 2021-03-18 09:32:50 | 0:31:36 | 0:24:54 | 0:06:42 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code/{ceph clusters/{fixed-2 openstack} fast/normal mon_election/connectivity msgr-failures/few objectstore/bluestore-comp-zlib rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-small-objects} | 2 |
| pass | 5975373 |
|
2021-03-17 23:54:31 | 2021-03-18 09:01:54 | 2021-03-18 10:09:54 | 1:08:00 | 0:56:22 | 0:11:38 | smithi | master | centos | 8.2 | rados/cephadm/thrash/{0-distro/centos_8.2_kubic_stable 1-start 2-thrash 3-tasks/rados_api_tests fixed-2 msgr/async root} | 2 |
| pass | 5975374 |
|
2021-03-17 23:54:32 | 2021-03-18 09:02:35 | 2021-03-18 09:23:32 | 0:20:57 | 0:11:43 | 0:09:14 | smithi | master | ubuntu | 18.04 | rados/singleton/{all/max-pg-per-osd.from-replica mon_election/classic msgr-failures/many msgr/async-v1only objectstore/bluestore-comp-zstd rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975375 |
|
2021-03-17 23:54:33 | 2021-03-18 09:02:45 | 2021-03-18 09:31:04 | 0:28:19 | 0:16:05 | 0:12:14 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04 fixed-2 mon_election/connectivity start} | 2 |
| pass | 5975376 |
|
2021-03-17 23:54:35 | 2021-03-18 09:03:35 | 2021-03-18 09:25:14 | 0:21:39 | 0:12:35 | 0:09:04 | smithi | master | ubuntu | 18.04 | rados/objectstore/{backends/keyvaluedb supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975377 |
|
2021-03-17 23:54:36 | 2021-03-18 09:03:46 | 2021-03-18 09:26:06 | 0:22:20 | 0:13:33 | 0:08:47 | smithi | master | rhel | 8.3 | rados/thrash-erasure-code-shec/{ceph clusters/{fixed-4 openstack} mon_election/classic msgr-failures/few objectstore/bluestore-bitmap rados recovery-overrides/{more-async-partial-recovery} supported-random-distro$/{rhel_8} thrashers/careful thrashosds-health workloads/ec-rados-plugin=shec-k=4-m=3-c=2} | 4 |
| pass | 5975378 |
|
2021-03-17 23:54:38 | 2021-03-18 09:04:56 | 2021-03-18 09:33:51 | 0:28:55 | 0:18:35 | 0:10:20 | smithi | master | centos | 8.3 | rados/valgrind-leaks/{1-start 2-inject-leak/osd centos_latest} | 1 |
| pass | 5975379 |
|
2021-03-17 23:54:39 | 2021-03-18 09:06:57 | 2021-03-18 09:26:04 | 0:19:07 | 0:13:24 | 0:05:43 | smithi | master | rhel | 8.3 | rados/basic/{ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/many msgr/async objectstore/bluestore-bitmap rados supported-random-distro$/{rhel_8} tasks/scrub_test} | 2 |
| pass | 5975380 |
|
2021-03-17 23:54:40 | 2021-03-18 09:07:07 | 2021-03-18 09:44:00 | 0:36:53 | 0:25:22 | 0:11:31 | smithi | master | ubuntu | 20.04 | rados/cephadm/upgrade/{1-start-distro/1-start-ubuntu_20.04 2-repo_digest/repo_digest 3-start-upgrade 4-wait mon_election/connectivity} | 2 |
| pass | 5975381 |
|
2021-03-17 23:54:42 | 2021-03-18 09:08:08 | 2021-03-18 09:25:02 | 0:16:54 | 0:10:37 | 0:06:17 | smithi | master | rhel | 8.3 | rados/singleton-nomsgr/{all/full-tiering mon_election/connectivity rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975382 |
|
2021-03-17 23:54:43 | 2021-03-18 09:08:08 | 2021-03-18 09:37:55 | 0:29:47 | 0:18:39 | 0:11:08 | smithi | master | ubuntu | 18.04 | rados/thrash/{0-size-min-size-overrides/2-size-2-min-size 1-pg-log-overrides/normal_pg_log 2-recovery-overrides/{default} backoff/peering_and_degraded ceph clusters/{fixed-2 openstack} crc-failures/bad_map_crc_failure d-balancer/crush-compat mon_election/classic msgr-failures/fastclose msgr/async objectstore/filestore-xfs rados supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/cache-snaps} | 2 |
| pass | 5975383 |
|
2021-03-17 23:54:45 | 2021-03-18 09:08:38 | 2021-03-18 09:28:47 | 0:20:09 | 0:08:52 | 0:11:17 | smithi | master | ubuntu | 18.04 | rados/perf/{ceph mon_election/connectivity objectstore/bluestore-bitmap openstack scheduler/wpq_default_shards settings/optimized ubuntu_18.04 workloads/radosbench_4M_seq_read} | 1 |
| pass | 5975384 |
|
2021-03-17 23:54:46 | 2021-03-18 09:08:59 | 2021-03-18 09:26:06 | 0:17:07 | 0:08:18 | 0:08:49 | smithi | master | centos | 8.3 | rados/singleton/{all/mon-auth-caps mon_election/connectivity msgr-failures/none msgr/async-v2only objectstore/bluestore-hybrid rados supported-random-distro$/{centos_8}} | 1 |
| fail | 5975385 |
|
2021-03-17 23:54:47 | 2021-03-18 09:08:59 | 2021-03-18 09:32:23 | 0:23:24 | 0:12:33 | 0:10:51 | smithi | master | ubuntu | 20.04 | rados/cephadm/dashboard/{0-distro/ubuntu_20.04_kubic_stable task/test_e2e} | 2 |
Failure Reason:
Command failed (workunit test cephadm/create_iscsi_disks.sh) on smithi081 with status 1: 'mkdir -p -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && cd -- /home/ubuntu/cephtest/mnt.1/client.1/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=3ae49e85764e073e154cc3617a04d1d62c9897ac TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="1" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.1 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.1 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 3h /home/ubuntu/cephtest/clone.client.1/qa/workunits/cephadm/create_iscsi_disks.sh' |
||||||||||||||
| pass | 5975386 |
|
2021-03-17 23:54:48 | 2021-03-18 09:08:59 | 2021-03-18 09:28:51 | 0:19:52 | 0:06:26 | 0:13:26 | smithi | master | ubuntu | 18.04 | rados/multimon/{clusters/9 mon_election/classic msgr-failures/few msgr/async-v1only no_pools objectstore/bluestore-stupid rados supported-random-distro$/{ubuntu_latest} tasks/mon_clock_no_skews} | 3 |
| pass | 5975387 |
|
2021-03-17 23:54:50 | 2021-03-18 09:10:50 | 2021-03-18 09:37:19 | 0:26:29 | 0:15:45 | 0:10:44 | smithi | master | ubuntu | 20.04 | rados/cephadm/smoke/{distro/ubuntu_20.04_kubic_stable fixed-2 mon_election/classic start} | 2 |
| pass | 5975388 |
|
2021-03-17 23:54:51 | 2021-03-18 09:11:30 | 2021-03-18 09:51:29 | 0:39:59 | 0:32:14 | 0:07:45 | smithi | master | rhel | 8.3 | rados/singleton-bluestore/{all/cephtool mon_election/classic msgr-failures/many msgr/async objectstore/bluestore-comp-snappy rados supported-random-distro$/{rhel_8}} | 1 |
| pass | 5975389 |
|
2021-03-17 23:54:52 | 2021-03-18 09:12:21 | 2021-03-18 09:33:43 | 0:21:22 | 0:10:17 | 0:11:05 | smithi | master | centos | 8.3 | rados/thrash-erasure-code-big/{ceph cluster/{12-osds openstack} mon_election/classic msgr-failures/few objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{more-partial-recovery} supported-random-distro$/{centos_8} thrashers/default thrashosds-health workloads/ec-rados-plugin=lrc-k=4-m=2-l=3} | 3 |
| pass | 5975390 |
|
2021-03-17 23:54:53 | 2021-03-18 09:12:41 | 2021-03-18 09:48:58 | 0:36:17 | 0:24:08 | 0:12:09 | smithi | master | ubuntu | 18.04 | rados/thrash-erasure-code-isa/{arch/x86_64 ceph clusters/{fixed-2 openstack} mon_election/connectivity msgr-failures/few objectstore/bluestore-low-osd-mem-target rados recovery-overrides/{default} supported-random-distro$/{ubuntu_latest} thrashers/default thrashosds-health workloads/ec-rados-plugin=isa-k=2-m=1} | 2 |
| fail | 5975391 |
|
2021-03-17 23:54:54 | 2021-03-18 09:13:01 | 2021-03-18 17:58:55 | 8:45:54 | 8:36:44 | 0:09:10 | smithi | master | centos | 8.3 | rados/verify/{centos_latest ceph clusters/{fixed-2 openstack} d-thrash/default/{default thrashosds-health} mon_election/connectivity msgr-failures/few msgr/async-v2only objectstore/bluestore-low-osd-mem-target rados tasks/rados_api_tests validater/valgrind} | 2 |
Failure Reason:
Command failed (workunit test rados/test.sh) on smithi002 with status 124: 'mkdir -p -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && cd -- /home/ubuntu/cephtest/mnt.0/client.0/tmp && CEPH_CLI_TEST_DUP_COMMAND=1 CEPH_REF=3ae49e85764e073e154cc3617a04d1d62c9897ac TESTDIR="/home/ubuntu/cephtest" CEPH_ARGS="--cluster ceph" CEPH_ID="0" PATH=$PATH:/usr/sbin CEPH_BASE=/home/ubuntu/cephtest/clone.client.0 CEPH_ROOT=/home/ubuntu/cephtest/clone.client.0 ALLOW_TIMEOUTS=1 adjust-ulimits ceph-coverage /home/ubuntu/cephtest/archive/coverage timeout 6h /home/ubuntu/cephtest/clone.client.0/qa/workunits/rados/test.sh' |
||||||||||||||
| pass | 5975392 |
|
2021-03-17 23:54:55 | 2021-03-18 09:13:22 | 2021-03-18 09:30:13 | 0:16:51 | 0:07:48 | 0:09:03 | smithi | master | ubuntu | 18.04 | rados/singleton-nomsgr/{all/health-warnings mon_election/classic rados supported-random-distro$/{ubuntu_latest}} | 1 |
| pass | 5975393 |
|
2021-03-17 23:54:56 | 2021-03-18 09:13:32 | 2021-03-18 09:52:07 | 0:38:35 | 0:27:46 | 0:10:49 | smithi | master | ubuntu | 18.04 | rados/monthrash/{ceph clusters/3-mons mon_election/classic msgr-failures/mon-delay msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{ubuntu_latest} thrashers/one workloads/rados_mon_workunits} | 2 |
| pass | 5975394 |
|
2021-03-17 23:54:57 | 2021-03-18 09:14:42 | 2021-03-18 09:44:28 | 0:29:46 | 0:18:19 | 0:11:27 | smithi | master | ubuntu | 18.04 | rados/thrash-old-clients/{0-size-min-size-overrides/2-size-2-min-size 1-install/nautilus backoff/peering_and_degraded ceph clusters/{openstack three-plus-one} d-balancer/crush-compat distro$/{ubuntu_18.04} mon_election/classic msgr-failures/osd-delay rados thrashers/none thrashosds-health workloads/rbd_cls} | 3 |
| pass | 5975395 |
|
2021-03-17 23:54:58 | 2021-03-18 09:15:03 | 2021-03-18 09:43:21 | 0:28:18 | 0:16:25 | 0:11:53 | smithi | master | ubuntu | 18.04 | rados/cephadm/smoke-roleless/{1-start 2-services/{basic rgw} 3-final distro/ubuntu_18.04} | 2 |
| pass | 5975396 |
|
2021-03-17 23:55:00 | 2021-03-18 09:15:23 | 2021-03-18 09:34:57 | 0:19:34 | 0:09:21 | 0:10:13 | smithi | master | centos | 8.3 | rados/singleton/{all/mon-config-key-caps mon_election/classic msgr-failures/few msgr/async objectstore/bluestore-low-osd-mem-target rados supported-random-distro$/{centos_8}} | 1 |
| pass | 5975397 |
|
2021-03-17 23:55:02 | 2021-03-18 09:16:03 | 2021-03-18 09:42:53 | 0:26:50 | 0:16:07 | 0:10:43 | smithi | master | centos | 8.3 | rados/mgr/{clusters/{2-node-mgr} debug/mgr mon_election/connectivity objectstore/bluestore-comp-zlib supported-random-distro$/{centos_8} tasks/progress} | 2 |
| pass | 5975398 |
|
2021-03-17 23:55:04 | 2021-03-18 09:55:38 | 1686 | smithi | master | ubuntu | 18.04 | rados/standalone/{mon_election/classic supported-random-distro$/{ubuntu_latest} workloads/misc} | 1 | |||
Pulpito